Application Security Engineer

Há 2 dias

Lisbon, Portugal Claranet limited Tempo integral

We're fast learners, hard workers, natural collaborators... and

we Make Modern Happen

Our ambition is to unlock the potential of our digital world so that organisations everywhere can innovate and thrive securely.

We aim to achieve this goal by bringing together the world's most talented people and the most powerful technologies, combining them to address our customers' challenges and to build something stronger together.

Right now, we are looking for a

Application Security Engineer

to integrate our internal team, based in Lisbon.

Your responsibilities include:

Supporting application security assessments for new applications and major changes

Analysing security requirements and reviewing architectures, data flows, interfaces and dependencies

Identifying vulnerabilities and recommending mitigations

Running Threat Modelling and embedding Security by Design across the project lifecycle

Validating implemented controls and issuing security recommendations to support go/no-go decisions

Producing clear technical reports and tracking findings until they are closed

Supporting the integration of AppSec tooling (SAST, DAST, SCA, IAST)

Reporting on risk and maturity indicators, and supporting audits

You must have:

A degree in Cybersecurity, Computer Science, Computer Engineering or a related field.

3 to 5 years of experience in cybersecurity, with proven experience in application security (Web, Mobile, APIs, Cloud)

Knowledge of ISO 27001 and OWASP Top 10

Hands-on experience with Threat Modelling (STRIDE, LINDDUN or equivalent)

Strong documentation and communication skills

We value:

Experience in large corporate or industrial environments

Familiarity with Secure SDLC and corporate security governance

Experience integrating security tools into delivery pipelines

A pragmatic, collaborative approach to working with development teams