security engineer in AI products

Air Apps is a family-founded technology company creating an AI-powered Personal & Entrepreneurial Resource Planner. Founded in Lisbon in 2018, the company has reached over 100 million downloads worldwide and operates offices in Lisbon and San Francisco.

• Develop and implement threat modeling across applications and infrastructure;
• Conduct vulnerability scanning, penetration testing, and security assessments;
• Define and enforce secure coding practices with development teams;
• Integrate security into CI/CD pipelines and automate security testing with DevOps;
• Monitor and respond to security incidents, conduct root cause analysis, and implement preventive measures;
• Ensure compliance with security standards and regulations such as ISO 27001, GDPR, and SOC 2;
• Design and implement IAM policies, encryption standards, and authentication mechanisms;
• Conduct security reviews of features, APIs, and third-party integrations with product teams;
• Develop incident response plans, security documentation, and best practices;
• Track emerging threats, vulnerabilities, and security technologies.

• Around 4+ years of experience in cybersecurity, application security, or security engineering;
• Strong knowledge of secure coding principles, OWASP Top 10, and threat modeling techniques;
• Experience with vulnerability scanning tools such as Nessus, Qualys, and Burp Suite, and penetration testing methodologies;
• Hands-on experience with SIEM, intrusion detection systems, and security monitoring tools;
• Proficiency in Python, Bash, or PowerShell scripting and automation for security tasks;
• Familiarity with cloud security in AWS, Azure, or GCP, including IAM and workload protection;
• Knowledge of encryption protocols, network security, and API security best practices;
• Experience with DevSecOps and integrating security into CI/CD pipelines;
• Ability to analyze security logs, detect anomalies, and mitigate potential threats;
• Excellent problem-solving skills and ability to communicate security concepts to non-technical stakeholders;
• Applicants must submit their own work without AI-generated assistance; use of AI in application materials, assessments, or interviews results in disqualification.

• Apple hardware ecosystem for work;
• Annual bonus;
• Top-tier health and life insurance;
• Transportation budget;
• Coverflex benefits package for meal allowances and well-being;
• Childcare support;
• Air Conference for team collaboration and growth;
• Pension fund;
• Urban Sports Club membership;
• Meals are 100% free at the hub.