Cyber Engineer
Guarde esta oferta e mantenha a sua pesquisa organizada
Crie uma conta gratuita para guardar ofertas, criar alertas e voltar a este anúncio a partir do seu painel.
Ao continuar, aceita os nossos Termos & Política de Privacidade.
CYBER ENGINEER (HYBRID)
Location: Porto, Portugal.Work Model: Hybrid.Languages: English – B2 (Mandatory), French – Basic knowledge.Seniority: Junior (2+ years).
Sector: Banking.Compensation: €*** RV / €* CTI.Overview
We are looking for a Cyber Engineer with a passion for Application Security and Vulnerability Management to join an international cybersecurity competency center responsible for protecting large-scale enterprise applications.
The role offers the opportunity to work with modern Application Security (AppSec) practices, helping development teams build secure software while implementing vulnerability management processes across the entire Software Development Lifecycle (SDLC).
Responsibilities
Support the deployment and maintenance of application security solutions.Participate in the implementation and continuous improvement of Secure Software Development Lifecycle (SSDLC/SDLC) processes.Execute and manage application security scans using SAST (Static Application Security Testing), SCA (Software Composition Analysis), and DAST (Dynamic Application Security Testing).
Analyze, qualify, and prioritize vulnerabilities identified by multiple security tools.Work closely with software development teams to reduce application security risks.Assist developers in implementing secure coding practices and application security controls.Track remediation activities and ensure vulnerabilities are resolved within compliance deadlines.Produce security metrics, reports, and vulnerability dashboards.Promote Application Security awareness throughout engineering teams.Share security best practices and support secure coding initiatives.Contribute to the continuous improvement of vulnerability management processes through automation.Technical Requirements
Minimum 2 years of experience in Cybersecurity, Information Security, or IT Risk.Hands‐on experience with SAST, SCA, DAST, and vulnerability management.Knowledge of Secure Software Development Lifecycle (SSDLC/SDLC) and OWASP Top 10.Experience working with vulnerability remediation processes.Knowledge of software development concepts and application architectures, including Java REST APIs and front‐end/backend technologies.Python scripting for automation.Experience with security scanning and vulnerability assessment.Excellent analytical, problem‐solving, communication, and teamwork skills.Nice to Have
Experience with Fortify, Qualys, Nexus IQ, Kubernetes, Bitsight, dependency scanning, code analysis platforms, and application security governance.Professional certifications: CISSP, CISM, CISA, CRISC, CRISK, CEH, CCSP, CCSK, ISO *, ISO *, EBIOS.
#J-***-Ljbffr