Security Engineer
Tieto · Porto, PT
Job Description We are looking for a DevSecOps / Application Security Engineer to join a forward-thinking technology team supporting large-scale digital tran...
Job description
Job Description We are looking for a DevSecOps / Application Security Engineer to join a forward-thinking technology team supporting large-scale digital transformation and cloud modernization initiatives. If you are passionate about secure software development, cloud-native security, and embedding security into every stage of the development lifecycle, this role offers an exciting opportunity to work in a collaborative and innovation-driven environment. Main Responsibilities: - Define, standardize, and evolve Secure Software Development Life Cycle (S-SDLC) practices across multiple engineering teams - Integrate and manage application security testing tools (SAST, DAST, SCA) within CI/CD pipelines - Lead vulnerability management initiatives across cloud environments and Kubernetes clusters - Maintain, automate, and improve infrastructure security controls, including WAF configurations and network security policies - Guide development and DevOps teams on secure coding practices and DevSecOps principles - Ensure alignment with industry standards and frameworks such as OWASP, CIS Benchmarks, and DORA - Support continuous improvement of security posture across applications and infrastru...