Security Engineer

About us:

Orders are packed by hand for two carrier pickups a day, and customer emails go to whoever is free.

The role:

Douro Apps is hiring for the Security Engineer role to secure our cloud infrastructure and the applications that run on it. You can work from home anywhere in Portugal. We have no office requirement. Standard office hours, Monday to Friday, with flexibility around them. We use Slack, Notion and Google Meet. Cameras on for team calls.

What you'll work on:

• Maintain EDR coverage with CrowdStrike Falcon or Microsoft Defender for Endpoint.
• Own secrets management, key rotation and KMS policies.
• Build detections and response playbooks in Splunk, Microsoft Sentinel or Elastic.
• Run threat modelling sessions with engineering teams on new features and architecture changes.

What we're looking for:

• 3+ years in security engineering, application security or a related engineering role.
• Ability to explain security issues to engineers without lecturing them.
• Good judgment on risk: knowing what to fix now and what can wait.
• Strong knowledge of the OWASP Top 10 and common web vulnerabilities.
• Hands-on cloud security experience in AWS, Azure or GCP.

Bonus points:

• OSCP, OSWE, CISSP or a cloud security certification (AWS Security Specialty, AZ-500)
• Kubernetes and container security (Falco, OPA Gatekeeper)

Benefits:

• Flexible start and finish times.

Tell us your notice period and what salary you are looking for.

Duration: 6 months. Start: Flexible.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Douro Apps Lda..