Mid Application Security Engineer (Cybersecurity)

TL;DR

Mid Application Security Engineer (Cybersecurity): Implementing and optimizing application security pipelines with an accent on vulnerability analysis and tool tuning. Focus on reducing noise in security pipelines, driving remediation of OWASP Top 10 vulnerabilities, and influencing secure-by-design decisions.

Location: Hybrid (2 days/week in Lisbon). Must be based in Portugal with Portuguese or EU citizenship, or a valid work permit

Company

A consulting firm that matches technical specialists with a diverse network of national and international partners across various tech sectors.

What you will do

• Implement and manage security tooling including SAST, SCA, DAST, container image scanning, and IaC scanning.
• Perform vulnerability analysis and prioritize findings based on the OWASP Top 10.
• Optimize security pipelines by identifying false positives to improve signal quality.
• Lead application security initiatives and guide cross-functional teams on secure-by-design decisions.
• Manage end-of-support lifecycle planning for security tooling.

Requirements

• 3+ years of experience in Cybersecurity, Application Security, or DevSecOps.
• Proficiency in the full software development lifecycle security tooling (SAST, DAST, SCA, IaC).
• Deep knowledge of OWASP Top 10 vulnerabilities and remediation.
• English: B2 fluency required.
• Based in Portugal with Portuguese/EU citizenship or a valid work permit.

Nice to have

• Fluency in French.

Culture & Benefits

• Health insurance and Coverflex meal card.
• Welcome kit and clear opportunities for career progression.
• Personalized support from a dedicated career coach.
• Flexible work-life balance and access to a wide network of international partners.