3 days ago
Lisbon, PortugalSenior
Responsibilities
- Define and promote secure software-development practices and integrate security requirements into the software development lifecycle.
- Participate in architecture reviews and conduct threat-modeling sessions.
- Analyze and track vulnerabilities from penetration tests, SAST, DAST, dependency analysis, and container-security tools.
- Support development teams in analyzing and remediating vulnerabilities.
- Coordinate penetration tests, including scope definition, supplier management, and result validation.
- Promote secure coding through workshops, guidelines, and mentoring.
- Support the integration of security controls into CI/CD pipelines and DevSecOps practices.
- Define application-security metrics and monitor security-maturity progress.
Requirements
- Relevant education or experience in software development and application architecture.
- Professional experience in Application Security or related secure-development roles.
- Good knowledge of Java with Spring Boot and/or C# with .NET.
- Knowledge of AWS, Azure, or Google Cloud and experience deploying applications.
- Knowledge of Linux and scripting.
- Understanding of OWASP Top 10, ASVS, secure coding, threat modeling, OAuth2, OpenID Connect, JWT, API security, cryptography, and secrets management.
- Experience with application-security tools including SonarQube, Checkmarx, Fortify, Veracode, Snyk, OWASP ZAP, Burp Suite, or Trivy.
- Knowledge of CI/CD and DevSecOps practices.
- Strong communication, collaboration, influencing, analytical, problem-solving, training, mentoring, and risk-mitigation skills.
Benefits
- Health insurance.
- Flexibility in organizational routine.
- Training and certifications.
- Employee Assistance Program covering five areas, including psychology.
- Birthday and work-anniversary offers.
- Monthly happy hour.
- Benefits portal with attractive offers.
About Timestamp
Timestamp is a Portuguese IT services group that designs, integrates, and manages enterprise information systems for large organizations. It delivers consulting, software integration, and managed services across cloud transformation, data & AI, business automation, and infrastructure, using technologies such as Linux, containers, VMware, and PostgreSQL. Founded in 2003 and headquartered in Lisbon, it is privately held and serves clients across Europe and Latin America.