Application Security Engineer (Portugal)

Stack

Responsibilities

• ▹Perform design and architecture review of new features and suggest security requirements
• ▹Collaborate with DevOps and engineering teams, advising on security features and SDLC best practices
• ▹Use static security scanning tools, review findings and coordinate remediation
• ▹Perform ongoing manual security assessments
• ▹Review results of external penetration tests and communicate suggested fixes to development teams
• ▹Provide on-demand support on application security topics
• ▹Drive process improvement ideas
• ▹Assist with vetting and intake of defects from third-party security researchers via the Bug Bounty program

Requirements

• ▹Must be located in Portugal
• ▹3-5 years of experience in the application security field
• ▹Bachelor's or Master's degree in a related field
• ▹Knowledge of secure coding best practices and industry standards (such as OWASP), applied across programming languages
• ▹Familiarity with SDLC and DevSecOps concepts and hands-on experience implementing them
• ▹Knowledge and/or hands-on experience identifying AI threats in a security landscape
• ▹Experience with static and dynamic security scanning tools (such as BurpSuite, ZAP and Snyk)
• ▹Ability to explain application security threats and mitigation options to developers and project managers
• ▹Good written and verbal English communication skills

Nice to have

• ▹Programming experience, preferably in Python
• ▹Experience and/or knowledge in securing applications in cloud platforms (AWS, Azure) and containerized environments (Docker, Kubernetes)
• ▹Participation in CTF challenges and bug-bounty programs

Soft skills

About the company

Intermedia is a leading provider of cloud communications and collaboration technology with a record of growth and profitability. Its culture is built on teamwork and transparency, and it promotes from within.