5 months ago
Paris, FranceMid Level
Responsibilities
- Develop and implement threat modeling to identify application and infrastructure security risks.
- Conduct vulnerability scanning, penetration testing, and security assessments.
- Define and enforce secure coding practices with development teams.
- Integrate security into CI/CD pipelines and automate security testing with DevOps.
- Monitor and respond to security incidents, perform root cause analysis, and implement preventative measures.
- Support compliance with ISO 27001, GDPR, SOC 2, and other security standards and regulations.
- Design and implement IAM policies, encryption standards, and authentication mechanisms.
- Perform security reviews of product features, APIs, and third-party integrations.
- Develop incident response plans, security documentation, and security best practices.
- Track emerging threats, vulnerabilities, and security technologies.
Requirements
- Around 4+ years of experience in cybersecurity, application security, or security engineering.
- Strong knowledge of secure coding principles, OWASP Top 10, and threat modeling techniques.
- Experience with Nessus, Qualys, Burp Suite, vulnerability scanning, and penetration testing methodologies.
- Hands-on experience with SIEM, intrusion detection systems, and security monitoring tools.
- Proficiency in Python, Bash, or PowerShell for security scripting and automation.
- Familiarity with cloud security in AWS, Azure, or GCP, including IAM and workload protection.
- Knowledge of encryption protocols, network security, and API security best practices.
- Experience with DevSecOps and integrating security into CI/CD pipelines.
- Ability to analyze security logs, detect anomalies, and mitigate potential threats.
- Strong problem-solving and communication skills, including the ability to explain security concepts to non-technical stakeholders.
Benefits
- Fully onsite in Lisbon with relocation support available
- Apple hardware ecosystem for work
- Annual bonus
- Health and life insurance
- Transportation budget
- Coverflex benefits package for meals and well-being
- Childcare support
- Air Conference team collaboration and development opportunity
- Pension fund
- Urban Sports Club membership
- Free meals at the hub
Tech Stack
Categories
About Air Apps
Air Apps develops and publishes consumer mobile apps for iOS and Android across productivity, utilities, fitness, creativity, and learning. Founded in 2018 in Lisbon and now operating from Lisbon and San Francisco, the privately held company is self-funded and reports over 100 million worldwide downloads across 30+ titles. Current work includes an AI-powered Personal & Entrepreneurial Resource Planner.