Senior Application Security Engineer

📍 Lisbon, Portugal | Hybrid

We are looking for an experienced Application Security Engineer to join an international team focused on strengthening application security and improving security practices across the software development lifecycle.

In this role, you will help define and implement Application Security initiatives, support development teams in identifying and addressing vulnerabilities, and contribute to embedding security into development processes.

• Define and drive Application Security strategies, initiatives and roadmaps.
• Improve and maintain the Secure Software Development Lifecycle (S-SDLC).
• Support development teams in identifying, analysing and remediating security vulnerabilities.
• Implement and integrate security tools into CI/CD pipelines.
• Promote security best practices through workshops, training sessions and technical documentation.
• Mentor and support team members, encouraging a strong security culture.
• Monitor security performance through KPIs, KRIs and OKRs.
• Explore emerging technologies and contribute to Proofs of Concept (PoCs).

• At least 3 years of experience in Application Security, Cybersecurity or DevSecOps.
• Practical experience with application security tools and techniques, including SAST, DAST, SCA, container scanning, IaC scanning and secrets detection.
• Experience integrating security tools into CI/CD pipelines.
• Knowledge of OWASP Top 10 and application vulnerability management.
• Programming knowledge in Python, C++, C# or other programming languages.
• Understanding of cloud security environments.
• Experience leading or coordinating Application Security initiatives.
• Strong communication skills and ability to collaborate with development teams.
• Master's degree or equivalent (Bac+5).
• Fluent English is mandatory; French is a plus.

• Opportunity to work in an international environment.
• Participation in strategic Application Security initiatives.
• A collaborative environment focused on continuous improvement and knowledge sharing.