Junior/Middle Application Security Engineer

9 Hours ago • All levels • Cyber Security

Job Summary

Job Description

Veeam, a global leader in data resilience, is seeking a Junior/Middle Application Security Engineer to join their QA team in the Lisbon R&D office. The role involves conducting security assessments, vulnerability scanning, and penetration testing of Veeam products and services. Responsibilities include integrating secure development practices into the SDLC, collaborating on security design and implementation, performing threat modeling and design reviews, conducting manual source code security audits, and utilizing automated application-analysis tools. The ideal candidate will have the ability to read source code in languages like C/C++/C#/JavaScript, understand secure software development principles, and possess strong analytical and communication skills.

Must have:

Ability to read C/C++/C#/JavaScript source code
Understanding of secure software development principles
Desire to develop in application security
Clear logic and analytical skills
Ability to work as part of a team
Good verbal and written English skills

Good to have:

Knowledge of scripting languages (Python, PowerShell, Bash, Ruby)
Knowledge of modern cryptographic algorithms
Experience with DAST and SAST tools
Skills using OWASP ZAP, Burp Suite, Kali Linux tools
Certifications (OSCP, CEH, CSSLP, CCSP, AWS Certified Security)
Familiarity with cloud platforms (AWS/Azure/GCP)
Experience playing CTF
Experience with HackTheBox
Experience with bug bounty hunting

Perks:

Medical insurance for employee, spouse, and children
Annual vacation days
Meal allowance
Statutory insurances (healthcare, nursing care, unemployment)
Worldwide 24/7 accident insurance coverage
Veeam Care Days for volunteering
Professional training and education (courses, workshops, online platforms, mentoring)

18 skills required

18 skills required for this role

Add these skills to join the top 1% applicants for this job

communication

cpp

talent-acquisition

ethical-hacking

quality-control

owasp-zap

html

ruby

linux

aws

azure

powershell

burp-suite

python

algorithms

bash

javascript

Job Details

Veeam, the #1 global market leader in data resilience, believes businesses should control all their data whenever and wherever they need it. Veeam provides data resilience through data backup, data recovery, data portability, data security, and data intelligence. Based in Seattle, Veeam protects over 550,000 customers worldwide who trust Veeam to keep their businesses running. Join us as we move forward together, growing, learning, and making a real impact for some of the world’s biggest brands. The future of data resilience is here - go fearlessly forward with us.

Veeam Quality Assurance team invites you to work on Veeam products with Veeam QA professionals in the Lisbon R&D office.

Your tasks will include:

Conduct regular security assessments, vulnerability scanning, and penetration testing of Veeam products and services
Work with development teams to integrate secure development practices into the software development lifecycle
Collaborate on the design and implementation of security within Veeam products
Threat modeling and design reviews for new and existing Veeam products
Conducting manual source code security audits
Using automated application-analysis tools

What we expect from you:

Ability to read source code on programming languages (such as C/C++/C#/JavaScript)
A good understanding of the principles of secure software development
A desire to develop in the field of application security
A lively and flexible mind, clear logic, and analytical skills
The desire and ability to work as part of a team
Good verbal and written communication skills in English

Will be an advantage:

Knowledge of scripting languages (Python, PowerShell, Bash, Ruby, etc.)
Knowledge of modern cryptographic algorithms
Experience with DAST and SAST tools
Skills using OWASP ZAP, Burp Suite, Kali Linux tools
Certifications such as OSCP, CEH, CSSLP, CCSP, AWS Certified Security, etc.
Familiarity with cloud platforms (such as AWS/Azure/GCP)
Experience playing CTF
Experience with HackTheBox
Experience with bug bounty hunting

We offer:

Medical insurance for you, your spouse and your children (up to the age of 18)
Annual vacation days
Meal allowance
Statutory insurances: Veeam covers employee’s healthcare, nursing care and unemployment insurances contributions. Maximum insurance contributions are capped as stipulated by the law
Accident insurance: Worldwide 24/7 coverage of accident cases including invalidity benefit, rescue costs coverage, death and disability coverage
Veeam Care Days – additional 24 hours for your volunteering activities
Professional training and education, including courses and workshops, internal meetups, and unlimited access to our online learning platforms (Percipio, Athena, O’Reilly) and mentoring through our MentorLab program

Please note: If the applicant is permanently present outside of Portugal, Veeam reserves the right to refuse to consider the application for a job. Remote job is only possible in case the employee is located in Portugal.

#LI-AR1
#LI-Hybrid

Veeam Software is an equal opportunity employer and does not tolerate discrimination in any form on the basis of race, color, religion, gender, age, national origin, citizenship, disability, veteran status or any other classification protected by federal, state or local law. All your information will be kept confidential.

Please note that any personal data collected from you during the recruitment process will be processed in accordance with our Recruiting Privacy Notice.

The Privacy Notice sets out the basis on which the personal data collected from you, or that you provide to us, will be processed by us in connection with our recruitment processes.

By applying for this position, you consent to the processing of your personal data in accordance with our Recruiting Privacy Notice.