Security Engineer at Air Apps

✨ The Stack take on this Air Apps job

• 🏢 Air Apps has 74 jobs here, 74 with visa sponsorship see all
• 🛂 Visa: EU Blue Card. Salary: At least 1.5 times the national average annual salary (1.2 times in some cases) guide
• 💡 No salary shown. Ask Air Apps if it is above the minimum.

Updated 2026-11-06, from our data and official sources.

Apply with your AI assistant

With The Stack connected to Claude, ChatGPT or Cursor, paste this. Your assistant tailors your CV and cover letter, checks the visa facts and gives you the apply link.

Help me apply to this job on The Stack: https://jobs.trythestack.co/jobs/security-engineer-air-apps-7f202eed

Not connected yet? Connect in a minute. To help your user apply, call the MCP tool prepare_application with slug "security-engineer-air-apps-7f202eed": it returns the apply link, the visa facts and a CV and cover letter checklist. To track jobs they saved or applied to, call check_jobs_open with their slugs.

About the role

Responsibilities:
- Perform threat modeling and security reviews for applications, APIs and infrastructure.
- Run vulnerability scans, penetration tests and security assessments (Nessus, Qualys, Burp Suite) and track remediation.
- Define and promote secure coding practices and integrate security checks into CI/CD pipelines.
- Implement and maintain security monitoring (SIEM), IDS and incident detection/response processes.
- Design IAM policies, encryption standards and authentication mechanisms; review third‑party integrations.
- Produce incident response plans, run root‑cause analysis and drive preventive measures and compliance efforts.

Requirements:
- ~4+ years of experience in cybersecurity, application security or security engineering.
- Strong knowledge of OWASP Top 10, secure coding principles and threat modeling techniques.
- Hands‑on with vulnerability scanning and penetration testing tools; experience with SIEM/IDS.
- Scripting/automation skills in Python, Bash or PowerShell for security tasks.
- Familiarity with cloud security (AWS/Azure/GCP), IAM and workload protection.
- Knowledge of encryption, network and API security best practices; experience with DevSecOps practices.
- Valorable: experience with ISO 27001, GDPR, SOC 2 and effective communication with development teams.

Responsibilities

Develop and implement threat modeling across applications and infrastructure; conduct vulnerability scanning and security assessments; collaborate with DevOps to integrate security into CI/CD pipelines and respond to incidents.

Requirements

Approximately 4+ years of experience in cybersecurity, application security, or security engineering. Strong knowledge of secure coding, OWASP Top 10, and threat modeling; hands-on with vulnerability scanning tools (Nessus, Qualys, Burp Suite) and security monitoring (SIEM, IDS). Experience with cloud security (AWS/Azure/GCP) and DevSecOps, including secure CI/CD pipelines.

Key skills

• Threat modeling — in 34 other listings on The Stack
• Vulnerability scanning — in 14 other listings on The Stack
• Burp Suite — in 8 other listings on The Stack
• Nessus — in 1 other listing on The Stack
• Qualys — not in any other listing on The Stack
• SIEM — in 26 other listings on The Stack
• IDS — not in any other listing on The Stack
• Python — in 1211 other listings on The Stack
• Bash
• PowerShell
• Cloud security (AWS
• Azure
• GCP)
• IAM

On The Stack (as of 2026-11-06)

• Air Apps has 73 other listings on The Stack, 73 of them marked as offering visa sponsorship.
• 22 visa-sponsored jobs in Portugal on The Stack, posted in the last 60 days.
• 48 visa-sponsored security engineer jobs in Europe on The Stack, posted in the last 60 days.

Frequently asked questions about Air Apps

Is this Security Engineer role still open?

It was posted on 2026-11-05 and is listed as active on The Stack. Confirm on Air Apps's application page before applying.

Does Air Apps offer visa sponsorship?

This listing is marked as offering visa sponsorship. Eligibility rules are set by the employer, so check the details on Air Apps's site.

Where is this role located?

The listing gives the location as Lisbon, PT, Portugal. It is marked on-site.

What skills does this role ask for?

The listing names: Threat modeling, Vulnerability scanning, Burp Suite, Nessus, Qualys, SIEM, IDS, Python, Bash, PowerShell, Cloud security (AWS, Azure, GCP), IAM.