Graduate Security Engineer

TF Labs is a 19-person software shop in Porto. The founders still answer support tickets. Our product started as a side project in 1993 and now has a few hundred paying customers, mostly in Porto.

Job summary:

We're looking for a Graduate Security Engineer to join our team in Porto. This hire will run our application security program: threat modelling, code scanning, pen test follow-up and developer guidance. This role is remote. You will need a reliable internet connection and a quiet place to work.

What you'll be doing:

• Triage bug bounty reports from HackerOne or Bugcrowd
• Harden AWS, Azure or GCP accounts and fix misconfigurations found by Wiz, Prisma Cloud or Security Hub
• Design and maintain SSO, MFA and conditional access with Okta or Entra ID
• Assess third-party vendors and SaaS integrations for security risk
• Maintain EDR coverage with CrowdStrike Falcon or Microsoft Defender for Endpoint
• Write secure coding guidelines and run developer training
• Run threat modelling sessions with engineering teams on new features and architecture changes
• Own secrets management, key rotation and KMS policies

What we're looking for:

• 1+ years in security engineering, application security or a related engineering role
• Ability to explain security issues to engineers without lecturing them
• Programming or scripting ability in Python, Go or similar
• Experience with SIEM, EDR or vulnerability management tools

Nice to have:

• Running a bug bounty program
• OSCP, OSWE, CISSP or a cloud security certification (AWS Security Specialty, AZ-500)
• Malware analysis or digital forensics background

What you get:

Salary range: €1,400 - €1,650 per month

• Private health insurance
• Remote work allowance
• Flexible remuneration plan

Please submit your CV in English.

Tell us your notice period and what salary you are looking for.

Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at TF Labs Lda..