Application Security Architect

<!--block-->About Damia


<!--block-->Damia is a specialist tech recruitment agency in Portugal, focused on technology, product, and engineering roles. We work with funded scaleups, international companies building teams in Portugal, and established tech organisations scaling critical hires. 


<!--block-->Our approach is consultative, not transactional. Every mandate runs through a structured methodology, from strategic discovery and talent mapping to curated shortlists and post-hire follow-up, led by senior recruiters who understand the market and the roles they recruit for. 


<!--block-->We are part of the Triveris Group ecosystem alongside We Are META and Landing.Jobs, giving us reach across the full spectrum of tech talent in Portugal.

Damia supports its clients with direct hires.

<!--block-->
About the role: The Application Security team ensures the security of the company's products. In this role, you will evaluate security architecture, design and implement technology, processes, and procedures by collaborating closely with developers, product managers, and other members of the security team.

<!--block-->Responsibilities:

• <!--block-->Initiate and improve processes, tools, and documentation that will support application security requirements
• <!--block-->Identify security design gaps in existing and proposed architectures, services, and products
• <!--block-->Evaluate architecture, design, and code to identify and resolve potential vulnerabilities and security risks
• <!--block-->Work closely with development teams to prioritise and resolve application security issues and implement security best practices and frameworks.
• <!--block-->Assist in identifying and responding to security issues in the company's environment

<!--block-->
<!--block-->Requirements

• <!--block-->5+ years of application security hands-on experience
• <!--block-->Experience performing security design and code reviews, threat modeling, and customizing application security solutions
• <!--block-->Strong understanding of common security attacks and their remediation
• <!--block-->Hands-on experience with AI tools and AI-based security solutions
• <!--block-->Experience performing security design reviews and security testing for AI systems, LLM-based applications, and AI agents
• <!--block-->Experience with programming languages: Ruby, Scala, Python, JavaScript, etc. (Advantage)
• <!--block-->Ability to work well with developers and product management
• <!--block-->Experience working in a large-scale SaaS environment (Advantage)
• <!--block-->Knowledge of microservice architecture, web technologies, and APIs (Advantage) 
• <!--block-->Ability to explain complex security problems
• <!--block-->Excellent problem-solving skills
• <!--block-->Currently living in Portugal and legally authorized to work in the country