Mid Application Security Engineer

Location: Lisbon, Portugal; hybrid attendance two times per week. Candidates must be based in Portugal and hold Portuguese or EU citizenship, or a valid work permit.

Company

A technology consultancy connecting cybersecurity consultants with national and international clients across diverse tech sectors.

What you will do

• Implement and operate application security tooling across the software development lifecycle.
• Use SAST, SCA, DAST, container image scanning, infrastructure-as-code scanning, and secrets detection.
• Analyze vulnerabilities, prioritize findings, and drive remediation.
• Identify false positives and tune scanning tools to improve security-pipeline signal quality.
• Guide cross-functional teams and influence secure-by-design decisions.
• Manage end-of-support lifecycle planning for application security initiatives.

Requirements

• 3+ years of experience in cybersecurity, application security, or DevSecOps.
• Proficiency with SAST, SCA, DAST, container image scanning, IaC scanning, and secrets detection.
• Deep knowledge of OWASP Top 10 vulnerabilities and vulnerability remediation.
• Experience leading application security initiatives and influencing cross-functional teams.
• English fluency at B2 level is required.
• Based in Portugal with Portuguese or EU citizenship, or a valid work permit.

Nice to have

• French fluency.

Culture & Benefits

• Consulting work with national and international technology partners across diverse sectors.
• Career progression opportunities and personalized career-coach support.
• Health insurance.
• Coverflex meal card, welcome kit, and additional protocols and discounts.
• Support for work-life balance and employee well-being.