Application Security Engineer
$80,000–$100,000 year
On-site · Lisbon, Lisbon, Portugal
Job Summary
Join BrainRocket as a Senior Application Security Engineer responsible for collaborating with teams to design security architecture using secure by design principles. You will implement security controls across applications and cloud infrastructure, oversee product security during migrations to public cloud, and serve as a trusted advisor on cybersecurity matters. Required qualifications include experience in security scanning, securing JavaScript/Typescript applications, CI/CD ecosystems, Python/shell scripting, supply chain security, and Agile methodologies, among others.
Required Qualifications
- Experience integrating security scanning/tooling into the development pipeline
- Experience in analysing and securing microservices and applications developed using JavaScript and Typescript
- Experience with CI/CD pipelines (such as Gitlab, Jenkins) and infrastructure-as-a-code models (such as Terraform, Helm, or CloudFormation)
- Hands-on development experience in Python/shell scripting
- Strong understanding of supply chain security, software integrity, and secure software delivery
- Experience with Docker and mesh technologies (such as ISTIO)
- Experience with architecture and security reviews, threat modelling, and application risk is highly desired
- Experience working with Agile methodologies
- Knowledge of privacy laws and regulations, such as GDPR desired
- Familiarity with industry regulations, frameworks, and practices (e.g., PCI, ISO 27001, NIST)
Desired Qualifications
- In-depth experience with architecting secure services on Kubernetes
- Extensive experience with architecting secure services on AWS or on-prem data centers
- Security-related professional certifications e.g., CISSP, CISM, CCSK, CCSP, CEH
Apply with one swipe on Sorce. We auto-fill applications and apply on your behalf — no cover letters, no 40-minute forms.
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.