Job Overview
Location
Portugal (Remote)
Job Type
Full-time
Category
Security Engineer
Date Posted
March 28, 2026
Full Job Description
đź“‹ Description
- • Senior Application Security Engineer at Infiterra Inc. is a critical role focused on embedding security into the software development lifecycle to protect the company’s subscription commerce platform and ensure secure, scalable growth for its global partners.
- • This role is hands-on and deeply integrated with engineering teams, requiring proactive identification and mitigation of security risks across design, code, testing, and deployment phases to strengthen the organization’s application security posture.
- • What the person will do day to day:
- • Integrate security activities across all phases of the SDLC—including requirements, design, implementation, testing, deployment, and maintenance—ensuring security is built in, not bolted on.
- • Partner closely with product and engineering teams to advocate for and enforce secure development practices, providing real-time guidance during sprint planning and feature development.
- • Conduct threat modeling sessions using frameworks like STRIDE for new and existing systems to identify threats, attack vectors, misconfigurations, and flawed design patterns before code is written.
- • Perform security-focused code reviews to detect vulnerabilities such as injection flaws, broken authentication, and insecure direct object references, offering clear, actionable remediation advice.
- • Assess application and system architectures from a security standpoint, evaluating microservices, APIs, and cloud-native components for exposure and risk.
- • Execute manual and automated web application security testing (SAST, DAST, SCA, secrets scanning) to uncover vulnerabilities like XSS, CSRF, and insecure configurations.
- • Operate, tune, and enhance AppSec tooling, integrating security checks into CI/CD pipelines to enable automated vulnerability detection and fast feedback loops.
- • Support engineering teams during security incidents or vulnerability disclosures by assisting in triage, impact analysis, and root cause determination.
- • Drive security awareness by creating and maintaining secure coding guidelines, checklists, and training materials, and by mentoring engineers through hands-on enablement.
- • Continuously improve the AppSec program by identifying tooling gaps, recommending enhancements, and contributing to security metrics and maturity models.
- • About the team or company:
- • Infiterra is a recognized global leader in subscription commerce, providing a platform that automates and unifies subscription workflows for IT distributors, MSPs, and telcos, enabling operational efficiency and scalable growth.
- • The Engineering team is distributed across Greece and beyond, with a collaborative, tech-driven culture that values innovation, international mindsets, and security as a shared responsibility.
- • What the person can learn or achieve in this role:
- • Deepen expertise in modern application security practices within a fast-growing SaaS environment, gaining hands-on experience with cloud-native architectures, API security, and DevSecOps integration.
- • Influence and shape the long-term security strategy of a scaling tech company, developing leadership skills in cross-functional collaboration, risk communication, and security program evolution.
🎯 Requirements
- • Strong understanding of secure software development principles and experience working within modern SDLCs and agile workflows.
- • Solid knowledge of common vulnerability classes, including OWASP Top 10 and CWE, with hands-on experience in web application security testing.
- • Proven experience with application security tools (SAST, DAST, SCA, secrets scanning) and integrating them into CI/CD pipelines.
- • Ability to assess risk pragmatically, prioritize remediation, and communicate findings effectively to engineering and product teams.
- • Background in cloud-native architectures, APIs, and microservices, with a track record of collaborating closely with product and engineering teams.
🏖️ Benefits
- • Fully remote work with a work-from-anywhere scheme, allowing flexibility to travel and work from various locations.
- • Flexible working hours to support work-life balance and productivity across time zones.
- • Comprehensive health and life insurance program, plus a learning and development budget for continuous skill growth.
- • Opportunity to join a tech-driven, friendly team with an international mindset and a strong commitment to diversity and inclusion.
Skills & Technologies
Senior
Remote
About Infiterra Inc.
Infiterra Inc. is a technology company focused on developing and deploying advanced solutions for the energy sector. Their core offerings revolve around leveraging artificial intelligence and machine learning to optimize oil and gas exploration, production, and reservoir management. By analyzing vast datasets, Infiterra aims to enhance recovery rates, reduce operational costs, and improve safety and environmental performance for their clients. The company provides a suite of software tools and consulting services designed to integrate seamlessly with existing energy infrastructure. Their innovative approach helps energy companies make more informed decisions, mitigate risks, and maximize the value of their subsurface assets in an increasingly complex global market.
Get more remote jobs like this
Subscribe to the weekly newsletter for similar remote roles and curated hiring updates.
Newsletter
Weekly remote jobs and featured talent.
No spam. Only curated remote roles and product updates. You can unsubscribe anytime.
