Application Security Engineer

Description

Summary: This role involves defining application security strategies, mentoring junior engineers, leading vulnerability analyses, and fostering community engagement in a dynamic IT environment. Highlights: 1. Help define application security strategy and develop roadmaps 2. Mentor and supervise junior application security engineers 3. Lead complex vulnerability analyses and implement mitigation measures ###### **Workplace:** **Lisbon (On\-Site)** ###### **Role:** * Help define the application security strategy and develop the corresponding roadmap; * Mentor and supervise junior application security engineers; * Promote continuous improvement of the IT S\-SDLC framework; * Provide support and expert advice to development teams; * Lead complex vulnerability analyses and implement corresponding mitigation measures; * Foster community engagement by conducting advanced workshops and training sessions; * Conduct weekly open guidance sessions for developers; * Develop technical documentation and promote the adoption of best practices; * Monitor and optimize security\-related KPIs, KRIs, and OKRs; * Conduct technology watch and analyze emerging threats; * Propose and develop proofs of concept (POCs) for innovative security solutions. ###### **Profile:** * Bachelor’s degree in Information Technology; * At least 3 years of professional experience in cybersecurity, application security, and DevSecOps; * Proven experience leading application security projects; * Experience in the international banking sector is a plus; * Advanced knowledge of SAST, SCA, DAST, and container image analysis; * Knowledge of Infrastructure\-as\-Code (IaC) analysis tools and secret detection; * Experience integrating quality assurance and security tools into CI/CD pipelines; * Solid knowledge of Python, C\+\+, C\#, or other programming languages; * Familiarity with frameworks and technologies such as Hadoop and Angular; * In\-depth knowledge of the OWASP Top 10; * Experience in advanced vulnerability analysis and defining mitigation strategies; * Knowledge of cloud security in private, public, regulated, and hybrid environments; * Fluency in English; * Knowledge of French is a plus; * Leadership skills; * Excellent communication skills; * Strong technical problem\-solving skills. ###### **Work with us:** * With more than 30 years of experience, Rumos has a team of professionals specialized in IT; * At Rumos, consultants integrate highly challenging projects, based on the latest technology and in the most diverse sectors of activity; * Rumos consultants have access to a certified training plan, which offers a constant update of technical skills; * Rumos, as an employer, has job opportunities based on equity, integrity and diversity. Based on these values, we work so that no person is discriminated against on the basis of age, degree of disability, gender, marital status, pregnancy and maternity, race, beliefs or sexual orientation. We believe in everyone's abilities, because we have in our DNA team spirit and mutual help, empathy and respect.