Security Engineer – AppSec, GRC

Job not on LinkedIn

🔥 17 hours ago

🇵🇹 Portugal – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 25%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Workster

WebsiteLinkedInAll Job Openings

11 - 50 employees

💼 Consulting

📦 Logistics

📣 Marketing

Consulting • Logistics • Marketing

Workster is a recruitment platform focused on matching candidates with diverse job opportunities across various industries. With a commitment to boosting international careers, Workster partners with leading companies in sectors like technology, customer service, and business process outsourcing to help individuals find their next big career move. The platform emphasizes multilingual support and remote work options, catering to a global workforce.

📋 Description

• Assess the security of AI-powered products, applications, APIs and supporting infrastructure • Embed security requirements and practices into the software development lifecycle, from design and development through deployment and maintenance • Conduct or coordinate application security reviews, threat modelling, vulnerability assessments and penetration testing • Identify, prioritise and support remediation of security vulnerabilities, including risks specific to AI systems and integrations • Review AI system design and data flows for risks such as prompt injection, data leakage, insecure model access and misuse of outputs • Develop and maintain secure coding standards, technical security guidance and AppSec policies • Advise engineering teams on secure architecture, authentication, authorisation, encryption, secrets management and API security • Support security controls for AI models, datasets, third-party services and model development or deployment workflows • Establish and maintain security governance, risk and compliance processes for products, services and internal systems • Contribute to risk assessments, control evaluations, audit evidence and remediation plans • Help map security practices to relevant frameworks, standards and regulatory requirements • Collaborate with privacy, legal, compliance and risk teams on data protection and responsible AI considerations • Support security incident readiness and contribute to the investigation and resolution of application or AI-related security incidents • Track security metrics, prepare reports and communicate risks, findings and recommendations to technical and non-technical stakeholders • Keep up to date with application security practices, AI threats, security standards and relevant regulatory developments

🎯 Requirements

• Professional experience in security engineering, application security, information security or a related field • Experience assessing and securing web applications, APIs, cloud services or software platforms • Understanding of secure software development, threat modelling, vulnerability management and security testing • Knowledge of common application security risks and relevant testing approaches • Experience with governance, risk and compliance activities, such as risk assessments, control reviews or audit support • Familiarity with security frameworks and standards such as ISO 27001, NIST or SOC 2 • Understanding of cloud security, identity and access management, encryption and secure configuration principles • Awareness of AI and machine learning security risks, including data, model and inference-time threats • Ability to assess technical risks and explain their impact and remediation options clearly • Strong analytical and problem-solving skills, with attention to detail and a practical approach to risk • Ability to work collaboratively with engineering, product, data, legal and compliance teams • Strong written and verbal communication skills, including the ability to prepare clear security documentation • Ability to manage competing priorities and contribute effectively in a changing technology environment • Experience with security testing tools, code scanning, cloud security platforms or GRC systems is an advantage • Relevant security certifications or training are an advantage • Fluent English, both written and spoken

🏖️ Benefits

• Opportunity to strengthen the security of AI-powered products and services • Collaborative work with engineering, product, data, legal and compliance teams • Meaningful involvement in application security and security governance initiatives • Professional development in a rapidly evolving technology and security sector • International and multidisciplinary working environment