Application Security Engineer

About the role

Diconium works on projects that connect software, data, AI and human expertise to build, run and scale digital products and services. It is looking for an Application Security Engineer in Porto, working on secure software development and integrating security tools into development workflows.

Key responsibilities

• Implement, configure and manage Application Security Testing (AST) solutions, focusing on SAST and SCA tools such as SonarQube and Black Duck
• Integrate security tools into software development workflows and CI/CD pipelines, enabling automated security checks
• Identify, analyze and prioritize vulnerabilities in application source code and third-party dependencies, supporting remediation
• Define and maintain security scanning policies, quality gates, rules and reporting mechanisms
• Collaborate with developers, DevOps engineers and other stakeholders to promote security by design
• Support threat modeling, security assessments and continuous improvement of security testing

Required profile

• Knowledge of programming languages (Java, Go, Python)
• Secure coding practices
• Knowledge of OWASP Top 10

Required skills

• SAST tools (SonarQube or similar)
• SCA tools (Black Duck or similar)
• Vulnerability management and remediation
• CI/CD security integration

Nice to have: German, DAST, cloud security (Azure/AWS), DevSecOps, container and supply chain security, threat modeling and license compliance.

What we offer

• Hybrid work, flexible hours, parental support and sabbaticals
• Training programs, free language courses and a tech community
• Public transport tickets, job bikes, health offers, supplementary insurance and a pension plan

Applications start with a CV, followed by two interviews and an optional onsite visit in Ingolstadt.