Application Security Engineer

Emagine is seeking an Application Security Engineer to join a long-term international project focused on improving application security across the software development lifecycle. This role is ideal for a security professional with a strong software engineering background who can work closely with development, architecture, operations, and security teams to identify risks, improve secure development practices, and support vulnerability remediation.

What You'll Be Working On

• Promote and implement Secure SDLC practices across development teams.

• Perform threat modelling, security architecture reviews, and secure design assessments.

• Support development teams in implementing secure authentication, authorization, and data protection mechanisms.

• Analyze and prioritize findings from SAST, DAST, dependency scanning, container scanning, vulnerability assessments, and penetration tests.

• Coordinate penetration testing activities, validate findings, and support remediation efforts.

• Integrate security controls into CI/CD pipelines and promote DevSecOps best practices.

• Deliver secure coding workshops, technical guidance, and security awareness initiatives.

• Define application security metrics, standards, and governance practices.

What We're Looking For

• Previous experience in Software Development, Software Architecture, or Application Engineering, followed by a transition into Application Security.

• Strong understanding of Application Security and secure software development practices.

• Hands-on experience with OWASP Top 10, OWASP ASVS, Secure Coding, Threat Modelling, and API Security.

• Experience with authentication and authorization frameworks, including OAuth2, OpenID Connect, and JWT.

• Knowledge of cryptography concepts, TLS, certificate management, secrets management, and secure data protection.

• Experience analyzing and supporting remediation of security vulnerabilities across applications and platforms.

• Practical knowledge of CI/CD pipelines and DevSecOps practices.

• Experience with cloud environments, preferably AWS and/or Azure.

• Strong communication skills and ability to collaborate effectively with development teams.

• Professional fluency in English.

Technical Environment

• Development technologies such as Java (Spring Boot) and/or C# (.NET/.NET Core).

• Linux environments, shell scripting, and basic system hardening.

• Cloud platforms including AWS, Azure, and other public cloud environments.

• Security tools such as SonarQube, Checkmarx, Fortify, Veracode, Snyk, Dependabot, OWASP ZAP, Burp Suite, and Trivy.

Nice to Have

• Frontend development experience with Angular, JavaScript, or TypeScript.

• Experience mentoring developers and promoting Security Champion programs.

• Experience working in enterprise environments with mature security governance frameworks.

• Relevant certifications in Application Security, Cloud Security, or Secure Software Development.

Location & Eligibility

• Candidates must be based in Portugal.

• Hybrid role in Lisbon.

• Long-term assignment (12+ months).

• Start date: ASAP.

About emagine

At emagine, we value diversity, inclusion, and equal opportunities. We believe that different perspectives drive innovation and create stronger teams, and we are committed to fostering an inclusive environment where everyone can thrive. We work with leading international clients on innovative and high-impact projects, offering opportunities to grow both professionally and personally. If you are interested in this opportunity, we encourage you to apply and become part of a dynamic and forward-thinking environment.

To learn more about us, visit our website: www.emagine-consulting.com.