Application security engineer

Emagine is seeking an Application Security Engineer to join a collaborative and dynamic project environment in Portugal. This role is ideal for a professional with a strong software development background who has transitioned into Application Security, looking to promote secure development practices and support teams in building secure applications by design. You will work closely with Development, Architecture, DevOps, and Cybersecurity teams to integrate security throughout the software development lifecycle, assess vulnerabilities, and drive remediation and security improvements.

• Promote Secure SDLC practices and security-by-design principles.
• Participate in architecture reviews and threat modelling.
• Analyse and prioritize findings from SAST, DAST, vulnerability assessments, and penetration tests.
• Support development teams with vulnerability remediation and secure coding.
• Coordinate penetration testing activities with external partners.
• Integrate security controls into CI/CD pipelines and support DevSecOps initiatives.
• Promote OWASP Top 10, ASVS, and secure coding best practices.

• Previous experience in Software Development, followed by Application Security experience.
• Strong knowledge of Secure SDLC, OWASP Top 10, OWASP ASVS, and Threat Modelling.
• Experience with Java / Spring Boot and/or C# / .NET / ASP.NET.
• Experience with application security testing and vulnerability management.
• Cloud experience, preferably AWS and/or Azure.
• Experience with CI/CD and DevSecOps practices.
• Strong analytical, communication, and mentoring skills.
• Professional level of English.
• Будет плюсом: Experience with Angular, JavaScript, or TypeScript; Knowledge of tools such as SonarQube, Checkmarx, Fortify, Veracode, Snyk, Burp Suite, or OWASP ZAP; Knowledge of OAuth2, OIDC, JWT, TLS, and secure API design

• Hybrid working model - 2/3x per week, Lisbon.