security engineer for AI-powered planning

Air Apps is a self-funded, family-founded company creating an AI-powered Personal & Entrepreneurial Resource Planner. Founded in Lisbon in 2018, the company has reached over 100 million downloads worldwide and operates offices in Lisbon and San Francisco.

• Develop and implement threat modeling across applications and infrastructure;
• Conduct vulnerability scanning, penetration testing, and security assessments;
• Define and enforce secure coding practices with development teams;
• Integrate security into CI/CD pipelines and automate security testing with DevOps;
• Monitor and respond to security incidents;
• Conduct root cause analysis and implement preventative measures;
• Ensure compliance with security standards and regulations, including ISO 27001, GDPR, and SOC 2;
• Design and implement IAM policies, encryption standards, and authentication mechanisms;
• Conduct security reviews of features, APIs, and third-party integrations with product teams;
• Develop incident response plans, security documentation, and best practices;
• Stay informed about emerging threats, vulnerabilities, and security technologies.

• Around 4+ years of experience in cybersecurity, application security, or security engineering;
• Strong knowledge of secure coding principles, OWASP Top 10, and threat modeling techniques;
• Experience with Nessus, Qualys, Burp Suite, and penetration testing methodologies;
• Hands-on experience with SIEM, intrusion detection systems, and security monitoring tools;
• Proficiency in Python, Bash, or PowerShell scripting and automation;
• Familiarity with AWS, Azure, or GCP cloud security, including IAM and workload protection;
• Knowledge of encryption protocols, network security, and API security best practices;
• Experience with DevSecOps and integrating security into CI/CD pipelines;
• Ability to analyze security logs, detect anomalies, and mitigate potential threats;
• Excellent problem-solving skills and ability to communicate security concepts to non-technical stakeholders.

• Apple hardware ecosystem for work;
• Annual Bonus;
• Top-tier Health and Life Insurance;
• Transportation Budget;
• Coverflex benefits package for meal allowances, well-being, and more;
• Childcare support;
• Air Conference for team meetings, collaboration, and professional growth;
• Pension Fund;
• Urban Sports Club membership;
• Meals 100% free at the hub;
• Applicants must submit their own work without any AI-generated assistance; using AI in application materials, assessments, or interviews results in disqualification.