Security engineer (hybrid)

SECURITY ENGINEER (HYBRID LISBON OR PORTO)

Portuguese company hires for hybrid position

Location: Lisbon (preferred) or Porto, Portugal

⚠️ Only candidates already based in Portugal will be considered

Work Model: Hybrid — 2 days onsite per week

️ Language Requirements: Fluent English required; French or other languages are a plus

Seniority: Mid-level (4+ years)

Rate Between €3200 - 3500 RV or unipessoal (gross value)

⚠️ Instructions: Please send your CV in English and make sure to include all skills and experience that match the requirements of the opportunity. This will significantly increase your chances of success.

About the Opportunity

We are looking for a Security Engineer to strengthen the security of Unified Commerce and Client Care solutions. You will collaborate with cybersecurity, development, operations, and partner teams to ensure secure digital platforms and compliance with global security policies.

Responsibilities

• Act as the primary contact for IT security topics, coordinating with cybersecurity teams, business stakeholders, and external partners.
• Deploy, maintain, and improve security components, ensuring compliance with security policies and standards.
• Coordinate penetration tests, vulnerability scans, and security intelligence reviews; support remediation and secure coding practices.
• Work with DevOps and QA teams to integrate automated security testing into CI/CD pipelines and define hardening procedures for web components and middleware.
• Participate in security audits covering data protection and e-commerce requirements; document security controls, processes, and incident management procedures.
• Provide training and technical guidance to internal teams and partners, promoting secure design and continuous security improvement.

Requirements

• At least 4 years of experience as a Security Engineer, preferably in digital, e-commerce, or software environments.
• Strong information security foundations and experience securing Internet, Extranet, and Intranet systems.
• Hands-on experience in web application security, vulnerability scanning, penetration testing, and incident response.
• Solid understanding of OWASP Top 10, secure coding, and web and mobile application security practices.
• Familiarity with DevOps environments and tools or technologies such as GitLab, SonarQube, Snyk, OIDC, OpenFGA, and AWS IAM policies.
• Working knowledge of AWS, Azure, or GCP, focusing on secure architecture and deployment.
• Practical development experience with languages and frameworks such as Java and JavaScript, including writing secure code.
• Bachelor’s or Master’s degree in Computer Science, Software Engineering, or a related field, and fluent English.

Ideal Candidate Profile

An analytical, proactive security professional who can work independently in a fast-paced Agile environment. Comfortable coordinating multinational teams, explaining security risks clearly, and helping developers and operations teams implement practical improvements.

5 Questions for Candidates

1. How many years of Security Engineering experience do you have in digital or e-commerce environments?
2. Can you describe a web vulnerability you identified and helped remediate?
3. How have you integrated automated security testing into CI/CD pipelines?
4. What hands-on experience do you have with cloud security, application hardening, and secure coding?
5. Are you fluent in English and available for two onsite days per week in Lisbon or Porto, with a rate of €3200–3500?

Keywords

Security Engineering, Application Security, OWASP Top 10, Penetration Testing, Vulnerability Management, DevSecOps, CI/CD, Cloud Security, IAM, Secure Coding, Hardening, Incident Response.

#00359779