Senior Security Engineer – Application Security

This is a fully remote position, open to applicants in Portugal.

📋 Description

• Take initiative in leading security efforts throughout all stages of the Software Development Life Cycle (SDLC), encompassing initial design and threat modeling to implementation, testing, and deployment.

• Be responsible for delivering moderately complex security projects or features.

• Collaborate with engineering and platform teams to enhance the security of AI-driven and autonomous capabilities.

• Perform targeted security assessments of applications, APIs, internal services, and platform components.

• Contribute to the establishment of secure-by-default practices, guardrails, and standardized approaches.

• Manage and enhance security tools by improving signal quality and minimizing noise.

• Develop or improve security tools and automation processes.

• Effectively communicate risks, tradeoffs, and recommendations to engineering teams.

• Identify deficiencies or inefficiencies in security processes and recommend enhancements.

• Provide mentorship to junior engineers and new team members.

• Cultivate strong relationships with stakeholders within the designated area of responsibility.

• Implement security enhancements that mitigate actual risks and reduce exposure durations.

• Avoid recurring vulnerability issues through improved design or automation strategies.

• Empower engineering teams to release products more rapidly while minimizing security-related surprises.

⛳️ Requirements

• Demonstrated experience in executing application security initiatives in contemporary, cloud-native environments.

• Solid understanding of application security fundamentals, including secure design principles and threat modeling.

• Experience in vulnerability management, including intake, triage, collaborative evaluation, and remediation.

• Capability to independently oversee and deliver moderately complex security assignments from inception to completion.

• Ability to address concerns across application security, cloud security, and platform security.

• Proficiency in writing and analyzing code.

• Experience in building or enhancing security tools and automation using modern programming languages.

• Competence in reviewing, validating, and securing AI-generated or low-code-generated code and workflows.

• Practical experience with AWS (mandatory), Kubernetes, and microservices architectures.

• Knowledge of penetration testing, red teaming, and purple teaming methodologies and their appropriate applications.

• Excellent communication and collaboration abilities.

• Capability to mentor junior team members.

• Practical understanding of AI-enabled and automated systems.

• Experience with AI-assisted development tools or agents.

• Familiarity with secure-by-default practices, paved roads, or guardrails.

• Exposure to Azure alongside AWS.

• Experience in enhancing the signal quality of security tools.

• Previous experience with developer platforms, low-code platforms, or highly automated systems.

🏝️ Benefits

• Structured professional development programs.

• Professional Development Fund.

• Internal Mobility Program.

• Mentorship from industry experts.

• Inclusive culture.

• Equal opportunity employment.