2 months ago
Lisbon, PortugalMid Level
Responsibilities
- Implement SSDLC with development teams.
- Analyze the security of the company’s products.
- Assist teams in addressing vulnerabilities.
- Stay informed about current threats and develop code protections.
Requirements
- At least 3 years of experience in web or mobile application security.
- Experience securing mobile and web applications.
- Experience building secure development processes (SSDLC).
- Experience with white-box testing.
- Knowledge of *NIX systems and basic network protocols.
- Preferred: experience in bug bounty programs.
- Preferred: relevant information security certifications such as OSCP or CompTIA Security+.
- Preferred: CVE authorship.
- Preferred: proficiency in Go, Python, or Java.
Benefits
- Base salary and performance-based bonuses are offered, with no specific amount stated.
- Office-first work arrangement with flexible hours and the possibility of working remotely 52 days per year.
- 22 days of paid annual leave.
- Health insurance including dental care for employees and their children, a daily meal allowance, and 100% paid sick leave.
- Licenses and access to a wide range of AI tools.
- Professional training, English courses, and opportunities for promotion.
- International collaboration across Portugal, Brazil, Latvia, and China, plus team-building activities and knowledge-sharing workshops.
About Joom
Joom Group builds e-commerce products for global trade, including Joom, a cross-border consumer marketplace; JoomPro, a B2B importing marketplace; JoomPulse, analytics for Mercado Livre sellers; and Onfy, a German pharmaceutical marketplace. Founded in 2016 in Riga and privately held, the company moved its headquarters to Lisbon in 2023 and operates across Europe, the Americas, and China. Revenue comes from marketplace commissions, services for sellers, and related transaction fees.