Junior/Middle Application Security Engineer

Veeam®, the #1 global market leader in data protection and ransomware recovery, is on a mission to empower every organization to not just bounce back from a data outage or loss but bounce forward.

With Veeam, organizations achieve radical resilience through data security, data recovery, and data freedom for their hybrid cloud. 

The Veeam Data Platform delivers a single solution for cloud, virtual, physical, SaaS, and Kubernetes environments that gives IT and security leaders peace of mind that their apps 
and data are protected and always available.

Headquartered in Seattle with offices in more than 30 countries, Veeam protects over 450,000 customers worldwide, including 74% of the Global 2000, who trust Veeam to keep their businesses running.

Veeam Quality Assurance team invites you to work on Veeam products with Veeam QA professionals in the Lisbon R&D office.

Your tasks will include:

• Conduct regular security assessments, vulnerability scanning, and penetration testing of Veeam products and services
• Work with development teams to integrate secure development practices into the software development lifecycle
• Collaborate on the design and implementation of security within Veeam products
• Threat modeling and design reviews for new and existing Veeam products
• Conducting manual source code security audits
• Using automated application-analysis tools

What we expect from you:

• Ability to read source code on programming languages (such as C/C++/C#/JavaScript)
• A good understanding of the principles of secure software development
• A desire to develop in the field of application security
• A lively and flexible mind, clear logic, and analytical skills
• The desire and ability to work as part of a team
• Good verbal and written communication skills in English

Will be an advantage: 

• Knowledge of scripting languages (Python, PowerShell, Bash, Ruby, etc.)
• Knowledge of modern cryptographic algorithms
• Experience with DAST and SAST tools
• Skills using OWASP ZAP, Burp Suite, Kali Linux tools
• Certifications such as OSCP, CEH, CSSLP, CCSP, AWS Certified Security, etc.
• Familiarity with cloud platforms (such as AWS/Azure/GCP)
• Experience playing CTF
• Experience with HackTheBox
• Experience with bug bounty hunting

We offer:

• Medical insurance for you, your spouse and your children (up to the age of 18)
• Annual vacation days
• Meal allowance
• Statutory insurances: Veeam covers employee’s healthcare, nursing care and unemployment insurances contributions. Maximum insurance contributions are capped as stipulated by the law
• Accident insurance: Worldwide 24/7 coverage of accident cases including invalidity benefit, rescue costs coverage, death and disability coverage
• Veeam Care Days – additional 24 hours for your volunteering activities
• Professional training and education, including courses and workshops, internal meetups, and unlimited access to our online learning platforms (Percipio, Athena, O’Reilly) and mentoring through our MentorLab program

Please note: If the applicant is permanently present outside of Portugal, Veeam reserves the right to refuse to consider the application for a job. Remote job is only possible in case the employee is located in Portugal. 

#LI-AR1
#LI-Hybrid