Senior Security Engineer - Application Security

6 days ago

Remote, PortugalSenior

Responsibilities

Drive application security work across all phases of the SDLC, including secure design, threat modeling, implementation, testing, and release.
Own and deliver moderately complex security projects, features, and small-to-medium security initiatives with limited oversight.
Conduct focused security assessments of applications, APIs, internal services, and platform components.
Partner with engineering and platform teams to secure AI-powered and agentic capabilities.
Develop and promote secure-by-default patterns, guardrails, and paved roads.
Operate, tune, and improve security tooling by reducing noise and increasing signal quality.
Build or extend security tooling and automation to eliminate manual or repetitive work.
Communicate security risks, tradeoffs, and recommendations to engineering stakeholders.
Identify security process gaps and propose practical improvements.
Mentor junior engineers and new hires and strengthen Product Security relationships.

Proven experience executing application security work in modern, cloud-native environments.
Strong grounding in secure design, threat modeling, vulnerability intake, triage, collaborative analysis, and remediation.
Ability to independently manage moderately complex security tasks from start to finish.
Experience working across application security, cloud security, and platform security concerns.
Ability to write and reason about code and build or extend security tooling and automation using modern programming languages.
Ability to review, validate, and secure AI-generated or low-code-generated code and workflows.
Practical experience with AWS, Kubernetes, and microservices architectures.
Understanding of when to use penetration testing, red teaming, and purple teaming.
Strong communication, collaboration, mentoring, and stakeholder-management skills.
Preferred experience with AI-enabled and automated systems, AI-assisted development tools, C#, Python, JavaScript, secure-by-default platform patterns, Azure, security signal improvement, developer platforms, low-code platforms, or highly automated systems.

Professional Development Fund and Internal Mobility Program supporting vertical progression, lateral moves, and specialized AI skills.
Global collaboration with experienced mentors and colleagues across a diverse, inclusive organization.
Equal opportunity employment and a global workforce with remote employees and offices across multiple countries.

1,001-5,000 employees