7 months ago
Lisbon, PortugalMid Level
Responsibilities
- Develop and implement threat modeling across applications and infrastructure.
- Conduct vulnerability scanning, penetration testing, and security assessments.
- Define and enforce secure coding practices with development teams.
- Integrate security into CI/CD pipelines and automate security testing with DevOps.
- Monitor and respond to security incidents, perform root cause analysis, and implement preventative measures.
- Support compliance with ISO 27001, GDPR, and SOC 2.
- Design and implement IAM policies, encryption standards, and authentication mechanisms.
- Conduct security reviews of product features, APIs, and third-party integrations.
- Develop incident response plans, security documentation, and security best practices.
- Track emerging threats, vulnerabilities, and security technologies.
Requirements
- Around 4+ years of experience in cybersecurity, application security, or security engineering.
- Strong knowledge of secure coding principles, OWASP Top 10, and threat modeling techniques.
- Experience with Nessus, Qualys, Burp Suite, vulnerability scanning, and penetration testing methodologies.
- Hands-on experience with SIEM, intrusion detection systems, and security monitoring tools.
- Proficiency in Python, Bash, and PowerShell for security scripting and automation.
- Familiarity with cloud security in AWS, Azure, or GCP, including IAM and workload protection.
- Knowledge of encryption protocols, network security, and API security best practices.
- Experience integrating security into CI/CD pipelines through DevSecOps practices.
- Ability to analyze security logs, detect anomalies, and mitigate potential threats.
- Strong problem-solving skills and ability to communicate security concepts to non-technical stakeholders.
Benefits
- Apple hardware ecosystem for work.
- Annual bonus.
- Top-tier health and life insurance.
- Transportation budget.
- Coverflex benefits package for meal allowances and well-being.
- Childcare support.
- Air Conference for team collaboration and professional growth.
- Pension fund.
- Urban Sports Club membership.
- Meals are 100% free at the hub.
Tech Stack
Categories
About Air Apps
Air Apps develops and publishes consumer mobile apps for iOS and Android across productivity, utilities, fitness, creativity, and learning. Founded in 2018 in Lisbon and now operating from Lisbon and San Francisco, the privately held company is self-funded and reports over 100 million worldwide downloads across 30+ titles. Current work includes an AI-powered Personal & Entrepreneurial Resource Planner.