Application Security Architect

Application Security Architect
Viseu
Viseu, Viseu District, Portugal

? Reach IT - Nearshore Solution!

Our nearshore expertise sets us apart. We specialize in
- demand, scalable solutions, and operational excellence. By bridging the talent gap, we deliver results that drive your business forward.

We are looking for a Application Security Architect?

Skills:

? Architectural experience of SAST, SCA, DAST, Ia
C, and API Security.

? Conduct Threat Modeling and define technical mitigation controls.

? Experience with OWASP Top 10, CWE, CVSS, and secure coding practices.

? Experience integrating App
Sec tools into CI/CD pipelines (Jenkins, Git
Hub Actions).

? Version control: Git.

? APIs & Automation: REST APIs, JSON, YAML.

? Python and Bash for automation and security process integration.

? Dev
Sec
Ops and security in the software lifecycle.

? Product technical guides, integration workflows, and security standards.

Your Responsibilities:

✅ Perform software architecture reviews focused on threats and security controls.

✅ Integrate and configure solutions (SAST, SCA, DAST, API Security, Ia
C) within CI/CD pipelines (Jenkins, Git
Lab, Git
Hub Actions, Azure Dev
Ops).

✅ Automate security reports, integrations, and workflows using Python, Bash, REST APIs, and JSON/YAML formats.

✅ Analyze SAST/SCA/DAST results, eliminate false positives, and guide development teams on secure vulnerability remediation.

✅ Conduct threat modeling sessions and design technical mitigation controls.

✅ Design customized App
Sec solutions for clients, aligning security requirements with team productivity.

✅ Deliver secure coding workshops and technical training sessions for developers and project leaders.

✅Collaborate with internal Product Management, R&D, and Support teams by providing technical feedback and continuous improvement recommendations.

✅ Support, when required, technical
- sales activities (demonstrations, Po
Cs, and client presentations).

✅ Document standards, integration workflows, and App
Sec best practice guides.