Security Engineer

About this role

Air Apps seeks a Security Engineer to protect applications and infrastructure by implementing secure development practices, conducting vulnerability assessments, and building resilient security systems. This fully onsite role in Lisbon involves collaborating with development and DevOps teams to establish threat modeling, incident response, and compliance frameworks.

What you'll do

• Develop threat modeling and conduct vulnerability scanning, penetration testing, and security assessments
• Define secure coding practices and integrate security into CI/CD pipelines with DevOps
• Monitor security incidents, perform root cause analysis, and implement preventative measures
• Ensure compliance with security standards (ISO 27001, GDPR, SOC 2) and design IAM/encryption policies
• Conduct security reviews of features, APIs, and third-party integrations
• Develop incident response plans, security documentation, and stay current with emerging threats

What they're looking for

• Cybersecurity and application security (4+ years experience)
• Secure coding, OWASP Top 10, and threat modeling
• Vulnerability scanning tools (Nessus, Qualys, Burp Suite) and penetration testing
• SIEM and intrusion detection systems
• Scripting and automation (Python, Bash, PowerShell)
• Cloud security (AWS, Azure, GCP) and DevSecOps
• Encryption, network security, and API security
• Security log analysis and anomaly detection

Benefits

• Apple hardware ecosystem
• Annual bonus
• Top-tier health and life insurance
• Transportation budget
• Coverflex benefits (meals, wellness)
• Childcare support