The RoleAs aSecurity Engineerat Air Apps, you will be responsible forsafeguarding our applications, infrastructure, and datafrom threats and vulnerabilities. You will work closely with development, Dev Ops, and IT teams to implementsecure coding practices, vulnerability scanning, and threat modelingto ensure our systems remain resilient against cyber threats.Your expertise will help build and maintain asecure development lifecycle (SDLC), security monitoring frameworks, and proactive risk mitigation strategies.This is afully onsite position, based at our office in Lisbon, where you will collaborate closely with cross‑functional teams in person and contribute to a dynamic and fast‑paced environment.We are open to support with relocation efforts.ResponsibilitiesDevelop and implementthreat modelingto identify security risks across applications and nductvulnerability scanning, penetration testing, and security assessmentsto detect weaknesses.Define and enforcesecure coding practicesin collaboration with development teams.Work with Dev Ops to integratesecurity into CI/CD pipelinesand automate security testing.Monitor and respond tosecurity incidents, conducting root cause analysis and implementing preventative measures.Ensure compliance withsecurity standards and regulations(e.G., ISO 27001, GDPR, SOC 2).Design and implementidentity and access management (IAM) policies, encryption standards, and authentication llaborate with product teams to conductsecurity reviews of features, APIs, and third‑party integrations.Developincident response plans, security documentation, and best practices.Stay ahead of emerging threats, vulnerabilities,



and security technologies.RequirementsAround4+ yearsof experience incybersecurity, application security, or security engineering.Strong knowledge ofsecure coding principles, OWASP Top 10, and threat modeling techniques.Experience withvulnerability scanning tools(Nessus, Qualys, Burp Suite) andpenetration testing methodologies.Hands‑on experience withSIEM, intrusion detection systems (IDS), and security monitoring tools.Proficiency inscripting and automation(Python, Bash, Power Shell) for security tasks.Familiarity withcloud securityin AWS, Azure, or GCP, including IAM and workload protection.Knowledge ofencryption protocols, network security, and API security best practices.Experience working withDev Sec Ops, integrating security into CI/CD pipelines.Ability to analyzesecurity logs, detect anomalies, and mitigate potential threats.Excellent problem‑solving skills and ability to communicate security concepts to non‑technical stakeholders.What benefits are we offering?Apple hardwareecosystem for work.Annual BonusTop‑tier Health and Life Insurancefor peace of mind.Transportation Budgetto support your commute verflexbenefits package for meal allowances, well‑being, and more.Childcaresupport.Air Conference– an opportunity to meet the team, collaborate, and grow together.Pension Fundto support your long‑term financial planning.Urban Sports Clubmembership to keep you als 100% freeat the hub.Diversity & InclusionAt Air Apps, we are committed to fostering a diverse, inclusive, and equitable workplace. We enthusiastically welcome applicants from all backgrounds, experiences, and perspectives. We celebrate diversity in all its forms and believe that varied voices and experiences make us stronger.

📌 Security Engineer (Barcelona)
🏢 airapps
📍 Barcelona