Application Security Engineer (Cybersecurity)

Location: Lisbon, Portugal; office-first with the possibility to work remotely for 52 days per year.

Company

hirify.global Group is an international technology group operating e-commerce, B2B marketplace, data platform, and pharmaceutical marketplace businesses.

What you will do

• Implement SSDLC practices together with development teams.
• Analyze the security of web and mobile products.
• Help engineering teams remediate identified vulnerabilities.
• Monitor current security threats and develop code protections.
• Build the application security direction from the ground up and contribute to international certification.

Requirements

• At least 3 years of experience in web and mobile application security.
• Experience securing mobile and web applications.
• Experience building secure development processes based on SSDLC.
• Experience with white box testing.
• Knowledge of *NIX systems and basic network protocols.

Nice to have

• Experience with bug bounty programs.
• Information security certifications such as OSCP or CompTIA Security+.
• CVE authorship.
• Proficiency in Go, Python, or Java.

Culture & Benefits

• Base salary with performance-based bonuses.
• Flexible hours in an office-first environment, with up to 52 remote workdays per year.
• 22 days of paid annual leave and 100% paid sick leave.
• Health insurance including dental care for employees and their children, plus a daily meal allowance.
• Access to AI tools, professional training, English courses, promotion opportunities, team-building activities, and knowledge-sharing workshops.
• Collaboration with colleagues across Portugal, Brazil, Latvia, and China.