Application Security Engineer (m/f/d) MI-DA Porto

As an Application Security (App
Sec) Engineer, you will be a key member of our internal global App
Sec team. This role is ideal for someone passionate about building scalable App
Sec solutions and driving security automation across a large and complex application landscape, based in hybrid cloud, Kubernetes and AI technologies. You will play a key role in shaping and scaling our global App
Sec program, working closely with product teams, Info
Sec, and other stakeholders. You’ll design and implement scalable security automation, lead technical initiatives, and empower teams to autonomously build secure applications. This is a position in Oporto () in a
- location team with colleagues also in Hamburg () and Tallinn (). We are living a hybrid working model with a healthy mix of remote work and
- premise collaboration with dev teams located in our three IT Hubs!

How you create impact

• Build and maintain automated security tooling and pipelines to support secure development at scale (e. g. , SAST, SCA, DAST, Ia
  C scanning).
• Champion and continuously improve our internal Application Security Testing (AST) platform and services, ensuring they are scalable, reliable, and
  - friendly.
• Enhance our vulnerability management automation processes to streamline detection, triage, priorization and remediation across the organization.
• Lead technical evaluations and
  -
  - concepts (Po
  Cs) for new App
  Sec tools, services and integrations.
• Provide expert guidance, documentation and
  - on support to development teams and other stakeholders on secure coding practices, threat modeling, and risk mitigation strategies.
• Drive the use of AI to enhance internal App
  Sec tooling and workflows, while helping engineering teams securely integrate AI into their products and services.
• Conduct AI security assessments and contribute to the development of our internal AI security service offering.
• Organize and lead workshops, training sessions, and
  - sharing initiatives to raise security awareness and capabilities across engineering team

What we would like you to bring

• 3+ years of experience in Application Security with a strong foundation in securing complex,
  - scale systems.
• Proven expertise with a range App
  Sec tools, including SAST, SCA, DAST and container security solutions.
• Hands-on experience with security automation & testing techniques such as penetration testing and secure code reviews.
• Sound knowledge of cloud and container platforms, particularly AWS and Kubernetes (preferred).
• Exposure to Gen
  AI security topics, including experience conducting AI security assessments or reviews (a plus).
• Strong software engineering background, ideally in enterprise environments, with proficiency in Java and/or Python.
• Experience in supporting Info
  Sec initiatives and
  - based security control implementations (a plus).
• A collaborative mindset – you enjoy working with international,
  - functional teams and driving alignment across stakeholders.
• Good communication skills with fluency in English (written and verbal), and the ability to clearly articulate security concepts to both technical and
  - technical audiences.

What's in it for you

You will have a direct influence on the future of logistics and IT. Your colleagues are experts who shape the IT industry in Portugal and worldwide. We want you to feel comfortable in your working surroundings. Therefore, we are offering you flexible working hours and mobile working arrangements. We value teamwork, continuous learning, and diversity. Kuehne+Nagel offers you a
- made career – through individual planning and supervisors who support and advise you in every way. You get supported by many
- life balance offerings and supplementary health insurance.