Security Engineer

📋 Description

• • As a Security Engineer at Air Apps, you will safeguard applications, infrastructure, and data from threats and vulnerabilities, working closely with development, DevOps, and IT teams to implement secure coding practices, vulnerability scanning, and threat modeling to ensure systems remain resilient against cyber threats.
• • You will develop and implement threat modeling, conduct vulnerability scanning and penetration testing, define and enforce secure coding practices, integrate security into CI/CD pipelines with DevOps, monitor and respond to security incidents, ensure compliance with standards like ISO 27001, GDPR, and SOC 2, design IAM policies and encryption standards, collaborate on security reviews of features and APIs, develop incident response plans, and stay ahead of emerging threats.
• • Air Apps is a family-founded, self-funded company founded in Lisbon in 2018 with offices in Lisbon and San Francisco, serving over 100 million downloads worldwide with its AI-powered Personal & Entrepreneurial Resource Planner (PRP), operating in a dynamic, fast-paced environment focused on innovation and impact.
• • You will gain hands-on experience in building secure development lifecycles, mastering cloud security across AWS/Azure/GCP, leading DevSecOps integration, and shaping enterprise-grade security practices while contributing to a mission-driven product used globally.