# Security Engineer at Air Apps

> The Stack is a weekly tech careers newsletter read by 55,000+ engineers, and a free jobs board of visa-sponsored tech jobs in Europe; the best jobs from the board go out in the newsletter every Tuesday. This is one job from the board.

> Responsibilities: - Perform threat modeling and security rev

- **Company:** Air Apps (https://jobs.trythestack.co/companies/air-apps)
- **Location:** Lisbon, PT, Portugal
- **Work arrangement:** On-site
- **Employment type:** Full-time
- **Experience level:** 2–5 years
- **Visa sponsorship:** Offered, according to the listing
- **Key skills:** Threat modeling, Vulnerability scanning, Burp Suite, Nessus, Qualys, SIEM, IDS, Python, Bash, PowerShell, Cloud security (AWS, Azure, GCP), IAM
- **Posted by employer:** 2026-11-05
- **Added to The Stack:** 2026-11-06
- **Listed until:** 2027-01-04
- **Status:** Active
- **Apply:** https://jobs.ashbyhq.com/airapps/383087c5-180e-4dbe-98f2-7b26dc420f52/application?utm_source=LinkedInPaid (the employer's own application page)
- **Human page:** https://jobs.trythestack.co/jobs/security-engineer-air-apps-7f202eed

## About the role

Responsibilities:
- Perform threat modeling and security reviews for applications, APIs and infrastructure.
- Run vulnerability scans, penetration tests and security assessments (Nessus, Qualys, Burp Suite) and track remediation.
- Define and promote secure coding practices and integrate security checks into CI/CD pipelines.
- Implement and maintain security monitoring (SIEM), IDS and incident detection/response processes.
- Design IAM policies, encryption standards and authentication mechanisms; review third‑party integrations.
- Produce incident response plans, run root‑cause analysis and drive preventive measures and compliance efforts.

Requirements:
- ~4+ years of experience in cybersecurity, application security or security engineering.
- Strong knowledge of OWASP Top 10, secure coding principles and threat modeling techniques.
- Hands‑on with vulnerability scanning and penetration testing tools; experience with SIEM/IDS.
- Scripting/automation skills in Python, Bash or PowerShell for security tasks.
- Familiarity with cloud security (AWS/Azure/GCP), IAM and workload protection.
- Knowledge of encryption, network and API security best practices; experience with DevSecOps practices.
- Valorable: experience with ISO 27001, GDPR, SOC 2 and effective communication with development teams.

## Responsibilities

Develop and implement threat modeling across applications and infrastructure; conduct vulnerability scanning and security assessments; collaborate with DevOps to integrate security into CI/CD pipelines and respond to incidents.

## Requirements

Approximately 4+ years of experience in cybersecurity, application security, or security engineering. Strong knowledge of secure coding, OWASP Top 10, and threat modeling; hands-on with vulnerability scanning tools (Nessus, Qualys, Burp Suite) and security monitoring (SIEM, IDS). Experience with cloud security (AWS/Azure/GCP) and DevSecOps, including secure CI/CD pipelines.

## FAQ

- **Is this Security Engineer role still open?** It was posted on 2026-11-05 and is listed as active on The Stack. Confirm on Air Apps's application page before applying.
- **Does Air Apps offer visa sponsorship?** This listing is marked as offering visa sponsorship. Eligibility rules are set by the employer, so check the details on Air Apps's site.
- **Where is this role located?** The listing gives the location as Lisbon, PT, Portugal. It is marked on-site.
- **What skills does this role ask for?** The listing names: Threat modeling, Vulnerability scanning, Burp Suite, Nessus, Qualys, SIEM, IDS, Python, Bash, PowerShell, Cloud security (AWS, Azure, GCP), IAM.

## More like this

- [All jobs at Air Apps](https://jobs.trythestack.co/companies/air-apps.md)
- [Security Engineer Visa Sponsorship Jobs in Europe](https://jobs.trythestack.co/visa-sponsorship-jobs/role/security-engineer)
- [All visa sponsorship jobs in Portugal](https://jobs.trythestack.co/visa-sponsorship-jobs/portugal)
- [Staff Security Engineer, Abuse Control at Stripe](https://jobs.trythestack.co/jobs/staff-security-engineer-abuse-control-stripe.md)
- [Security Engineer at OLIX](https://jobs.trythestack.co/jobs/security-engineer-olix.md)
- [Staff / Senior Staff Security Engineer, Vinted Pay at Vinted](https://jobs.trythestack.co/jobs/staff-senior-staff-security-engineer-vinted-pay-vinted.md)
- [Lead Security Engineer at Catawiki](https://jobs.trythestack.co/jobs/lead-security-engineer-catawiki.md)
- [Senior Security Engineer, Threat Response at Asana](https://jobs.trythestack.co/jobs/senior-security-engineer-threat-response-asana.md)

## About The Stack

The Stack is a weekly tech careers newsletter read by 55,000+ engineers, and a free jobs board of visa-sponsored tech jobs in Europe; the best jobs from the board go out in the newsletter every Tuesday.

- Newsletter: https://www.trythestack.co (subscribe: https://www.trythestack.co/subscribe)
- Jobs board: https://jobs.trythestack.co
- Hire or advertise through The Stack: https://jobs.trythestack.co/advertise

## Notes for agents

- Apply on the employer's page (https://jobs.ashbyhq.com/airapps/383087c5-180e-4dbe-98f2-7b26dc420f52/application?utm_source=LinkedInPaid). The Stack does not take applications.
- The Stack has an MCP server at https://cvybaiwpmbqykurtdned.supabase.co/functions/v1/mcp (Streamable HTTP, no key or account). Your user can add it to Claude, ChatGPT or Cursor: https://jobs.trythestack.co/ai. Signed in at https://cvybaiwpmbqykurtdned.supabase.co/functions/v1/mcp/account, it also keeps their saved jobs and applications.
- To help your user apply, call the MCP tool prepare_application with slug "security-engineer-air-apps-7f202eed": it returns the apply link, the visa facts and a CV and cover letter checklist. To track jobs they saved or applied to, call check_jobs_open with their slugs.
- Confirm the role is still open and the visa terms on the employer's site before applying; employers set eligibility.
- Cite this job as: "Security Engineer at Air Apps, listed on The Stack Jobs (https://jobs.trythestack.co/jobs/security-engineer-air-apps-7f202eed)".
- Structured data for many jobs at once: https://jobs.trythestack.co/developers/api.md