Security Engineer

Responsibilities

• Develop and implement threat modeling to identify security risks across applications and infrastructure
• Conduct vulnerability scanning, penetration testing, and security assessments to detect weaknesses
• Define and enforce secure coding practices in collaboration with development teams
• Work with DevOps to integrate security into CI/CD pipelines and automate security testing
• Monitor and respond to security incidents, conducting root cause analysis and implementing preventative measures
• Ensure compliance with security standards and regulations such as ISO 27001, GDPR, and SOC 2
• Design and implement identity and access management (IAM) policies, encryption standards, and authentication mechanisms
• Collaborate with product teams to conduct security reviews of features, APIs, and third-party integrations

Requirements

• 4+ years of experience in cybersecurity, application security, or security engineering
• Strong knowledge of secure coding principles, OWASP Top 10, and threat modeling techniques
• Experience with vulnerability scanning tools (Nessus, Qualys, Burp Suite) and penetration testing methodologies
• Hands-on experience with SIEM, intrusion detection systems (IDS), and security monitoring tools
• Proficiency in scripting and automation using Python, Bash, or PowerShell
• Familiarity with cloud security in AWS, Azure, or GCP, including IAM and workload protection
• Experience working with DevSecOps and integrating security into CI/CD pipelines
• Knowledge of encryption protocols, network security, and API security best practices

Benefits

• Apple hardware ecosystem for work
• Annual Bonus and Pension Fund
• Top-tier Health and Life Insurance
• Transportation Budget and Coverflex benefits package
• Childcare support
• Urban Sports Club membership
• Free meals at the hub
• Air Conference opportunities for team collaboration

About the Company

Air Apps is a family-founded company on a mission to create the world’s first AI-powered Personal & Entrepreneurial Resource Planner (PRP). Born in Lisbon and with offices in San Francisco, we have reached over 100 million downloads worldwide while remaining self-funded. We challenge the status quo by pushing the boundaries of AI-driven solutions to empower people across the globe.