Application Security Architect

At Damia (Permanent), in Lisbon, Portugal

Salary: €60.000 - €70.000

Expires at: 2027-05-12

Remote policy: Partial remote

About Damia

Damia is a specialist tech recruitment agency in Portugal, focused on technology, product, and engineering roles. We work with funded scaleups, international companies building teams in Portugal, and established tech organisations scaling critical hires.

Our approach is consultative, not transactional. Every mandate runs through a structured methodology, from strategic discovery and talent mapping to curated shortlists and post-hire follow-up, led by senior recruiters who understand the market and the roles they recruit for.

We are part of the Triveris Group ecosystem alongside We Are META and Landing.Jobs, giving us reach across the full spectrum of tech talent in Portugal.

Damia supports its clients with direct hires.

About the role: The Application Security team ensures the security of the company's products. In this role, you will evaluate security architecture, design and implement technology, processes, and procedures by collaborating closely with developers, product managers, and other members of the security team.

Responsibilities:

Initiate and improve processes, tools, and documentation that will support application security requirements

Identify security design gaps in existing and proposed architectures, services, and products

Evaluate architecture, design, and code to identify and resolve potential vulnerabilities and security risks

Work closely with development teams to prioritise and resolve application security issues and implement security best practices and frameworks.

Assist in identifying and responding to security issues in the company's environment

Requirements

5+ years of application security hands-on experience

Experience performing security design and code reviews, threat modeling, and customizing application security solutions

Strong understanding of common security attacks and their remediation

Hands-on experience with AI tools and AI-based security solutions

Experience performing security design reviews and security testing for AI systems, LLM-based applications, and AI agents

Experience with programming languages: Ruby, Scala, Python, JavaScript, etc. (Advantage)

Ability to work well with developers and product management

Experience working in a large-scale SaaS environment (Advantage)

Knowledge of microservice architecture, web technologies, and APIs (Advantage)

Ability to explain complex security problems

Excellent problem-solving skills

Currently living in Portugal and legally authorized to work in the country