Senior Application Security Engineer - Remote Opportunity

About the Role

We’re BrainRocket — an international software development and digital solutions company driven by 1,300 talented professionals across Cyprus, Malta, and Portugal. Here, everything moves at rocket speed: driving innovation, pioneering projects, and fast-tracking careers. Together, we turn ideas into action — let’s get started! We invite a Senior Application Security Engineer to join our team in Lisbon, Portugal. This Senior Application Security Engineer remote role is available for selected jurisdictions, allowing you to work from anywhere while contributing to our exciting projects.

What You'll Do

• Collaborate with cross-functional teams to achieve complex security objectives.
• Design security architecture from cloud infrastructure to application, implementing "secure by design" principles.
• Work closely with product managers, architects, and developers to implement security controls across our platform ecosystem.
• Proof security implementations within infrastructure and application deployment manifests and the CI/CD pipelines.
• Define necessary policies, controls, and capabilities to protect our products and environments.
• Build and validate declarative threat models automation.
• Participate in engineering teams’ product planning cycles and committees.
• Oversee product security aspects during migration from Data Center to public cloud, such as AWS.
• Act as a trusted cyber security advisor to product and application teams.

Requirements

• Minimum of 3 years experience as an Application Security Engineer.
• Experience integrating security scanning/tooling into development pipelines.
• Proficient in analyzing and securing microservices and applications developed using JavaScript and TypeScript.
• Hands-on experience with CI/CD pipelines (such as GitLab, Jenkins) and infrastructure-as-code models (Terraform, Helm, or CloudFormation).
• Strong development skills in Python and shell scripting.
• Deep understanding of supply chain security, software integrity, and secure software delivery.
• Experience with Docker and mesh technologies (such as ISTIO).
• Familiarity with architecture and security reviews, threat modeling, and application risk assessment.
• Experience working with Agile methodologies.
• Knowledge of privacy laws and regulations, such as GDPR, is desired.
• Familiarity with industry regulations, frameworks, and practices, including PCI, ISO 27001, and NIST.

Nice to Have

• In-depth experience with architecting secure services on Kubernetes.
• Extensive experience with architecting secure services on AWS or on-prem data centers.
• Security-related professional certifications (e.g., CISSP, CISM, CCSK, CCSP, CEH) are highly desirable.

What We Offer

• Learning and development opportunities with interesting, challenging tasks.
• Opportunity to develop language skills, with partial compensation for the cost of English classes.
• 20 working days of annual vacation for proper rest.
• Competitive remuneration level with annual review.
• Teambuilding activities to foster collaboration and camaraderie.

Bold moves start here. Make yours. Apply today!