Principal Software Engineer
OutSystems4 days ago
Lisbon, PortugalStaff+
Responsibilities
- Own the technical strategy for outer-loop security and supply chain integrity across R&D delivery.
- Design and build deploy-time policies, attestation verification, remediation workflows, security automation, and secure delivery controls.
- Enforce artifact signing, attestation, SBOM and provenance verification, and dependency and third-party risk controls at the release boundary.
- Own vulnerability detection, exploitability-based prioritization, routing, remediation, and verification workflows.
- Lead security and operational incident response for the delivery platform and drive durable fixes.
- Automate compliance evidence through continuous, machine-verified checks.
- Build secure and resilient delivery infrastructure for build and production environments.
- Lead cross-team technical initiatives, architecture and design reviews, and strategic engineering standards.
- Mentor engineers across the organization and define standards for deploy-time policy, platform reliability, and security baselines.
- Apply AI and agents to release and security engineering workflows.
Requirements
- Bachelor’s degree in Computer Science, Information Technology, or a related field, or equivalent experience.
- End-to-end ownership of the security and compliance posture of a production platform at scale and under audit.
- Deep security engineering experience in deploy-time policy enforcement, vulnerability management, incident response, supply chain integrity, and continuous compliance automation.
- Hands-on experience with Kubernetes, Azure and/or AWS, Terraform, and Python and/or .NET.
- Working knowledge of SOC 2 Type 2 and FedRAMP Moderate controls as applied to deployment, operations, and platform governance.
- Experience integrating AST, CWPP, or CNAPP tooling into delivery pipelines.
- Track record of cross-team technical leadership and mentoring without formal management authority.
- Availability to participate in an on-call rotation for critical incidents.
- Familiarity with policy-as-code frameworks such as OPA or Kyverno is preferred.
- Experience with Sigstore, SLSA, or in-toto attestation at production scale is preferred.
- Experience operating multi-tenant SaaS under government or regulated-sector compliance regimes is preferred.
- Experience building agentic systems or AI agents for security or operations is preferred.
Benefits
- Career opportunities including promotions, lateral moves, professional development programs, a Professional Development Fund, and an Internal Mobility Program.
- Collaboration with a global team of colleagues, mentors, and technical leaders.
- Inclusive and diverse global culture with equal-opportunity employment practices.
- Global working environment with collaboration across regions, including a counterpart in India.
About OutSystems
OutSystems builds a low-code application development platform for enterprises to design, integrate, and run web and mobile software, with cloud or on‑prem deployment options. It sells subscriptions and services around its PaaS to help teams deliver business‑critical apps, integrate with existing systems, and apply DevOps/AI tooling. Founded in 2001 and headquartered in Boston, the company is privately held and serves global enterprise customers across many industries.