Security Engineer I

Who we are

We do penetration testing, red team engagements and web application assessments for banks, hospitals and SaaS companies. Identity and access management projects, mostly Okta and Entra ID rollouts, have been part of the business since 2021.

The role is new and comes from growth in our client base. Ashcombe Defence is hiring for the Security Engineer I role to secure our cloud infrastructure and the applications that run on it. Remote position. Most of the team is in Faro, but nobody is required to come in. We keep meetings to a minimum and work mostly async.

Day to day

• Own secrets management, key rotation and KMS policies.
• Automate security checks in CI/CD pipelines.
• Review code and pull requests for security issues.
• Triage bug bounty reports from HackerOne or Bugcrowd.

What we're looking for

• 1+ years in security engineering, application security or a related engineering role.
• Good judgment on risk: knowing what to fix now and what can wait.
• Hands-on cloud security experience in AWS, Azure or GCP.
• Programming or scripting ability in Python, Go or similar.
• Strong knowledge of the OWASP Top 10 and common web vulnerabilities.
• Ability to explain security issues to engineers without lecturing them.

Why work with us

Rate: €1,950 - €2,350 monthly

• Private health insurance.
• Meal vouchers.
• Training budget.
• Stock options.
• Flexible start and finish times.
• Remote work allowance.

Please submit your CV in English.

Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Ashcombe Defense Lda..