Devoteam Cyber Trust | Application Security Engineer | FinTech Sector

Навыки

• AI-инструменты в работе
• API (интеграции)
• AWS
• Azure
• CI/CD
• DevSecOps
• Docker

О компании и продукте

• Devoteam Cyber Trust is the Cybersecurity specialist arm of the Devoteam Group. With our 800+ experts located across EMEA, we aim to establish cybersecurity as an enabler of business success rather than a gatekeeper. We leverage an end-to-end approach to Cyber Resilience, Applied Security, and Managed Security services to secure the tech journey of large and medium-sized companies from all sectors and industries
• We are looking for a Senior Application Security Consultant to join our Application Security team

Задачи

• Drive application security initiatives across the software development lifecycle (SDLC)
• Identify, assess, prioritize, and support the remediation of application security vulnerabilities
• Partner with engineering teams to promote secure coding practices and security-by-design principles
• Integrate security testing tools and controls into CI/CD pipelines
• Review source code and provide security recommendations during development
• Support secure design reviews and threat modeling activities
• Improve and automate security processes using modern AppSec and DevSecOps tools
• Contribute to the continuous evolution of the organization's application security program
• Strong knowledge of Application Security fundamentals, including
• OWASP Top 10
• Common Weakness Enumeration (CWE)
• Secure Design Principles
• Web and API vulnerability remediation
• Experience with Application Security tooling such as
• Checkmarx
• SonarQube
• OWASP Dependency-Check
• OWASP ZAP
• Experience integrating automated security controls into CI/CD pipelines using tools such as Jenkins, GitHub Actions, or GitLab CI
• Experience performing vulnerability analysis, triage, prioritization, and providing remediation guidance to development teams
• Working knowledge of cloud security concepts in AWS, Azure, or GCP, including
• IAM roles and permissions
• Security Groups

Требования

• Strong analytical and problem-solving skills
• Excellent communication and stakeholder management abilities
• Collaborative mindset with experience working alongside software engineering teams
• Passion for secure software development and continuous improvement
• Ability to thrive in a remote, fast-paced, and technology-driven environme
• The Devoteam Group works for equal opportunities, promoting its employees based on merit and actively fights against all forms of discrimination
• We are convinced that diversity contributes to the creativity, dynamism and excellence of our organization
• All of our vacancies are open to people with disabilities
• Join us in our mission to safeguard our clients' critical digital assets by applying deep technical expertise to their most strategic projects
• Since 2009, previously known as INTEGRITY, our team based in Portugal is specialised in providing cutting-edge Managed Security Services that combine its expertise and proprietary technology to consistently and effectively reduce the cyber risk of our clients
• The comprehensive service range includes Persistent Intrusion Testing, ISO 27001, PCI-DSS, GRC Consulting and Solutions, and Third-Party Risk Management
• ISO 27001 (Information Security) and ISO 9001 (Quality) certified, PCI-QSA, and member of CREST and CIS - Centre for Internet Security, we provide services to a considerable number of clients, operating in more than 20 countries
• Minimum of 4 years of experience in Application Security or a related cybersecurity role
• Ability to read and analyze source code with hands-on experience in at least one programming language such as Java, Python, or Go
• Hands-on experience with containerized environments using Docker and Kubernetes

Будет плюсом

• Experience working within FinTech or Enterprise SaaS environments
• Knowledge of security compliance frameworks such as
• ISO 27001
• Experience leveraging GenAI/LLMs to improve Application Security processes or developer productivity
• Practical experience conducting threat modeling using methodologies such as STRIDE
• Offensive security experience, including penetration testing, red teaming, bug bounty participation, Capture The Flag (CTF) competitions, or certifications such as OSCP or eJPT

Паспорт вакансии

История публикации

Откуда что взялось

Отмечено то, что вывели мы. Без пометки — значение назвал работодатель.

Почему на этом месте в выдаче

Порядок выдачи объявлен контрактом: свежесть решает между днями, полнота и зарплата — внутри дня.