{"id":38683,"url":"https://alion.io/job/devoteam-devoteam-cyber-trust-application-security-engineer-mobility-sector","title":"Devoteam Cyber Trust | Application Security Engineer | Mobility Sector","company":{"id":6640,"name":"Devoteam","domain":"devoteam.com","url":"https://alion.io/company/devoteam","size_band":"5000+","is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":"SmartRecruiters","truth_index":{"grade":"A","score":91,"open_postings":579,"ghost_share":0,"stale_share":0.378,"repost_share":0,"time_to_fill_p50_days":53,"computed_at":"2026-10-16T05:45:00Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Lisbon, Portugal"],"countries":["PT"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":60000,"max_usd":156000,"period":"year","method":"role_country_seniority_unknown","sample_n":32},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"ASP.NET Core","optional":false},{"name":"C#","optional":false},{"name":"CI/CD","optional":false},{"name":"ISO 27001","optional":false},{"name":"Maven","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"PCI DSS","optional":false},{"name":"Rest API","optional":false},{"name":"Spring Boot","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Angular","optional":true},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"Checkmarx","optional":true},{"name":"Dependabot","optional":true},{"name":"Fortify","optional":true},{"name":"GCP","optional":true},{"name":"Java","optional":true},{"name":"JavaScript","optional":true},{"name":"Linux","optional":true},{"name":"OWASP ASVS","optional":true},{"name":"OWASP ZAP","optional":true},{"name":"Snyk","optional":true},{"name":"SonarQube","optional":true},{"name":"Trivy","optional":true},{"name":"TypeScript","optional":true},{"name":"Veracode","optional":true}],"status":"live","first_seen_at":"2026-08-03T10:54:46Z","employer_posted_date":"2026-08-03","last_verified_at":"2026-10-16T20:41:42Z","board_verified":true,"closed_at":null,"days_open":74,"trust":{"level":"ok","repost_count":0,"flags":[],"days_open":73},"description":"Devoteam Cyber Trust is the Cybersecurity specialist arm of the Devoteam Group. With our 800+ experts located across EMEA, we aim to establish cybersecurity as an enabler of business success rather than a gatekeeper. We leverage an end-to-end approach to Cyber Resilience, Applied Security, and Managed Security services to secure the tech journey of large and medium-sized companies from all sectors and industries.\nSince 2009, previously known as INTEGRITY, our team based in Portugal is specialised in providing cutting-edge Managed Security Services that combine its expertise and proprietary technology to consistently and effectively reduce the cyber risk of our clients.\nThe comprehensive service range includes Persistent Intrusion Testing, ISO 27001, PCI-DSS, GRC Consulting and Solutions, and Third-Party Risk Management. ISO 27001 (Information Security) and ISO 9001 (Quality) certified, PCI-QSA, and member of CREST and CIS - Centre for Internet Security, we provide services to a considerable number of clients, operating in more than 20 countries.\n Mission\nEnsure that products and applications developed by the organization incorporate security principles from inception to operations, promoting secure development practices, coordinating vulnerability assessments and penetration tests, providing technical support to development teams for risk remediation, and contributing to the continuous evolution of application security maturity.\nResponsibilities\nApplication Security\nDefine and promote Secure SDLC practices.\n\nIntegrate security requirements into the development lifecycle.\n\nParticipate in architecture reviews and solution designs.\n\nConduct threat modeling sessions.\n\nSupport teams in implementing authentication, authorization, and data protection mechanisms.\n\nVulnerability Management\nAnalyze results originating from:\nPenetration Tests\n\nVulnerability Assessments\n\nSAST / DAST\n\nDependency Scanning\n\nContainer Scanning\n\nClassify and prioritize vulnerabilities.\n\nProvide technical support during remediation.\n\nTrack remediation plans and their respective SLAs.\n\nPenetration Testing Coordination\nDefine test scope.\n\nCoordinate with external vendors.\n\nValidate findings.\n\nEnsure tracking and closure of recommendations.\n\nTraining & Enablement\nConduct Secure Coding workshops.\n\nPromote OWASP Top 10 and secure development best practices.\n\nSupport the creation of Security Champions within teams.\n\nProduce technical guidelines and standards.\n\nDevSecOps\nIntegrate security controls into CI/CD pipelines.\n\nPromote automation of security checks.\n\nDefine application security metrics and key performance indicators (KPIs).\n\n Professional Profile & Background\nA professional with previous experience in software development and application architecture who has evolved into an Application Security role.\n\nAbility to interact with development, architecture, operations, and corporate security teams, acting simultaneously as a technical consultant, facilitator, and advocate for best practices.\n\nCapacity to understand code, architecture, and development processes, directly supporting the analysis and resolution of identified vulnerabilities.\n\nTechnical Skills\nSoftware Development\nSolid experience in at least one of the following stacks:\nJava: Spring Boot; REST APIs; Maven\n\nC# / .NET: .NET Framework / .NET Core; ASP.NET\n\nFrontend (Optional / Desirable): Angular (JavaScript / TypeScript)\n\nOperating Systems & Cloud Infrastructure\nLinux, Shell Scripting, and basic system hardening.\n\nRequired: Cloud knowledge with hands-on experience in production application deployments.\n\nDesirable: Knowledge of major cloud platforms (AWS and/or Azure preferred; Google Cloud or others are relevant and transferable).\n\nApplication Security Expertise\nPractical knowledge of:\nOWASP Top 10, OWASP ASVS, and Secure Coding best practices\n\nThreat Modeling\n\nAuthentication & Authorization (including OAuth2, OpenID Connect, and JWT)\n\nAPI Security & Secure API Design\n\nApplied Cryptography (TLS, key/certificate lifecycle, secure hashing)\n\nSecrets Management (secret stores, secret rotation, preventing secrets in code)\n\nSecurity Tooling\nExperience with tools such as:\nSonarQube, Checkmarx, Fortify, Veracode, Snyk, Dependabot, OWASP ZAP, Burp Suite, or Trivy\n\nBehavioral Competencies & Soft Skills\nExcellent communication skills.\n\nAbility to influence without hierarchical authority.\n\nTraining and mentoring capability.\n\nPragmatic approach to risk management.\n\nAbility to collaborate easily with development teams.\n\nStrong analytical mindset.\n\n The Devoteam Group works for equal opportunities, promoting its employees based on merit and actively fights against all forms of discrimination. We are convinced that diversity contributes to the creativity, dynamism and excellence of our organization. All of our vacancies are open to people with disabilities.\nJoin us in our mission to safeguard our clients' critical digital assets by applying deep technical expertise to their most strategic projects.\nApply now to become a key technical leader in this pivotal engagement and make a tangible impact as a key member of our Cybersecurity Engineering Professional Services team!","description_format":"text","description_chars":5175,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":[],"hiring_locations":[{"name":"Portugal","iso":"PT","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","Information Security","IT Consulting & Digital Transformation","Enterprise Apps Implementation Partners"],"lifecycle":[{"event":"open","at":"2026-08-03T10:54:46Z"}],"visa":[],"liveness":{"score":21,"band":"cold","label":"Long shot","p_open":1,"p_active":0.472,"p_room":0.44,"age_days":73,"expected_fill_days":53,"reasons":["conf:2","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-16T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/devoteam-devoteam-cyber-trust-application-security-engineer-mobility-sector","json_url":"https://alion.io/job/devoteam-devoteam-cyber-trust-application-security-engineer-mobility-sector.json","meta":{"generated_at":"2026-10-16T21:29:17Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":2458,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-17T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":6640},"rest":"https://alion.io/mcp/rest/get_company?id=6640"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fdevoteam-devoteam-cyber-trust-application-security-engineer-mobility-sector"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fdevoteam-devoteam-cyber-trust-application-security-engineer-mobility-sector"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fdevoteam-devoteam-cyber-trust-application-security-engineer-mobility-sector"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/devoteam-devoteam-cyber-trust-application-security-engineer-mobility-sector\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fdevoteam-devoteam-cyber-trust-application-security-engineer-mobility-sector"}]}