Senior Application Security Engineer (SaaS)

TL;DR

Senior Application Security Engineer (SaaS): Building secure-by-design products for a vertical AI SaaS platform with an accent on threat modeling, automated security testing, and vulnerability management. Focus on performing deep code reviews, implementing SAST/DAST/SCA pipelines, and collaborating with global engineering teams to secure complex .NET and web architectures.

Location: Must be based in Portugal (Remote)

Company

hirify.global is a global leader in vertical AI SaaS solutions for professional and financial services firms, leveraging over 20 years of industry expertise.

What you will do

• Define and enforce security requirements across product development lifecycles.
• Proactively identify and mitigate risks through threat modeling and security assessments.
• Design and implement automated security testing frameworks.
• Perform manual security assessments and code reviews to ensure high-quality security standards.
• Coordinate vulnerability response efforts across distributed engineering teams.

Requirements

• Must be based in Portugal.
• 3+ years in Application Security or 5+ years in combined development and security roles.
• Proven experience with SCA, SAST, and DAST tools.
• Strong backend development experience with .NET Framework and modern .NET.
• Familiarity with frontend development using at least one JavaScript framework.
• Strong programming skills and ability to work across diverse architectures.

Nice to have

• Application penetration testing experience.
• Backend experience with Python.

Culture & Benefits

• Competitive base pay with performance-based variable compensation and equity.
• Generous paid parental, marriage, bereavement, and carer's leave.
• Reimbursement for continuing education and training.
• One-time home office stipend and meal allowance.
• Opportunities for international travel to development centers for collaboration.