JobCubby JobCubby
Sign up
Claranet

Application Security Engineer

Claranet Lisbon, Portugal

Information Technology & Services · 1,001-5,000 employees

Yesterday
security Mid (2-5 yrs) Full-time Portugal
Create a free account to apply — email only, no card. You can also save this posting or score it against your profile with AI.

Applying here? Try the free cover letter tool — paste this posting and your résumé, no account needed.

About the role

The Application Security Engineer will perform security assessments, threat modeling, and vulnerability analysis to ensure secure application development. They will also integrate security tooling into pipelines and provide technical reports to support security decision-making.

What they look for

Application security Threat modelling SAST DAST SCA IAST ISO 27001 OWASP Top 10 Security by design Vulnerability assessment Secure SDLC Risk management Technical reporting Cloud security API security Mobile security

Requirements

Candidates must hold a degree in a relevant field and possess 3 to 5 years of experience in cybersecurity with a focus on application security. Proficiency in ISO 27001, OWASP Top 10, and threat modeling methodologies is required.

Benefits

Regular professional development Certification paths resources Regular teambuilding programs Friendly workplace

Full description

We're fast learners, hard workers, natural collaborators... and we Make Modern Happen!

Our ambition is to unlock the potential of our digital world so that organisations everywhere can innovate and thrive securely.

We aim to achieve this goal by bringing together the world’s most talented people and the most powerful technologies, combining them to address our customers' challenges and to build something stronger together.

If you share our vision, join us!

Right now, we are looking for a Application Security Engineer to integrate our internal team, based in Lisbon.

Your responsibilities include:

  • Supporting application security assessments for new applications and major changes
  • Analysing security requirements and reviewing architectures, data flows, interfaces and dependencies
  • Identifying vulnerabilities and recommending mitigations
  • Running Threat Modelling and embedding Security by Design across the project lifecycle
  • Validating implemented controls and issuing security recommendations to support go/no-go decisions
  • Producing clear technical reports and tracking findings until they are closed
  • Supporting the integration of AppSec tooling (SAST, DAST, SCA, IAST)
  • Reporting on risk and maturity indicators, and supporting audits

You must have:

  • A degree in Cybersecurity, Computer Science, Computer Engineering or a related field.
  • 3 to 5 years of experience in cybersecurity, with proven experience in application security (Web, Mobile, APIs, Cloud)
  • Knowledge of ISO 27001 and OWASP Top 10
  • Hands-on experience with Threat Modelling (STRIDE, LINDDUN or equivalent)
  • Strong documentation and communication skills

We value:

  • Experience in large corporate or industrial environments
  • Familiarity with Secure SDLC and corporate security governance
  • Experience integrating security tools into delivery pipelines
  • A pragmatic, collaborative approach to working with development teams

We offer:

  • Regular professional development;
  • Certification paths resources;
  • Regular teambuilding programs;
  • Friendly workplace.

Workplace: Lisbon - Hybrid

Claranet: Make Modern Happen!

Similar roles