Application Security Engineer

ABOUT THE OPPORTUNITY

We are looking for an Application Security Engineer to support a technology and risk management context in the banking sector. This role focuses on strengthening secure development practices, improving application security standards and supporting development teams in the adoption of security-by-design principles.

WHAT YOU WILL DO

- Contribute to the definition and continuous improvement of the application security strategy, roadmap and secure software development lifecycle practices.
- Support development squads with expert advisory, vulnerability analysis, remediation guidance and secure coding recommendations.
- Mentor application security team members and promote consistent practices across technical communities.
- Lead workshops, open guidance sessions and knowledge-sharing initiatives for development and technical teams.
- Develop clear documentation, best practices and operational guidance for application security activities.
- Monitor security-related KPIs, KRIs and OKRs to support continuous optimization and risk visibility.
- Analyze emerging threats, assess new security approaches and support proof-of-concept activities for innovative solutions.

WHAT WE ARE LOOKING FOR

- At least 3 years of experience in cybersecurity, application security or DevSecOps, with proven involvement in complex application security initiatives.
- Higher education background at Master's level or equivalent, preferably in engineering, computer science, cybersecurity or a related technical field.
- Experience supporting development teams in an international environment.
- Ability to lead technical discussions, guide remediation activities and influence the adoption of secure development practices.
- Strong analytical mindset, autonomy and solution-oriented approach to complex security challenges.
- Professional working proficiency in English.

TECHNICAL SKILLS

- Application security and secure software development lifecycle practices.
- SAST, SCA, container image scanning, DAST, infrastructure as code scanning and secrets detection.
- Security integration within CI/CD pipelines and quality assurance processes.
- Python, C++, C# or comparable programming languages.
- OWASP Top 10 and common application vulnerability patterns.
- Vulnerability analysis, remediation prioritization and false positive optimization.
- End-of-support lifecycle management.
- Cloud security across private, public, regulated and hybrid environments.

NICE TO HAVE

- Experience in banking or another regulated international environment.
- Knowledge of Hadoop, Angular or comparable development frameworks.
- Professional working proficiency in French.

COMPENSATION TRANSPARENCY

Base salary range: EUR 35,000 - EUR 55,000 gross/year
Total compensation: up to EUR 65,000/year
The salary range is based on objective and gender-neutral criteria, including required competencies, professional experience, level of responsibility and role requirements. Final compensation will be determined according to the candidate's profile and position requirements.

WHAT WE OFFER

- Private health insurance from day one, with no waiting periods and optional family extension.
- Confidential mental health support through TEAM 24, including psychological support, content and live sessions.
- Continuous training and certification support throughout your journey, with structured investment in long-term capability building.
- Flexibility whenever the role and context allow it, supporting sustainable performance and daily balance.
- Childcare vouchers and practical support measures designed to help balance personal and professional life.
- Community moments, shared milestones and leadership presence when it matters most.
- Upskilling opportunities in information security, cybersecurity best practices, quality management and AI governance where relevant to your development path.

EQUAL OPPORTUNITY

Hexa is committed to equal opportunity and inclusive recruitment practices. We value diverse backgrounds, perspectives and experiences, in alignment with the principles of the Portuguese Diversity Charter.

HEXA LIFE

At Hexa, every professional is a Builder. We work with honesty, mutual support and agility, building projects, solutions and professional relationships with responsibility, transparency and a focus on continuous improvement.