Senior Security Engineer - Application Security

As a Senior Security Engineer on the Application Security team at OutSystems, you will independently deliver meaningful security outcomes across our Agentic Systems platform, helping ensure that applications, platforms, and agentic capabilities are secure by design and safe by default. In this role, you will own and execute small-to-medium sized security initiatives and deliver significant service components of a large Product Security program.

Responsibilities

Independently drive security work across all phases of the SDLC, from early design and threat modeling through implementation, testing, and release; Own delivery of moderately complex security projects or features, adjusting standard approaches as needed to achieve the intended outcome; Partner with engineering and platform teams to secure AI-powered and agentic capabilities, ensuring security considerations are built in early rather than bolted on later; Conduct focused security assessments of applications, APIs, internal services, and platform components using the appropriate depth and methodology for the risk; Contribute to the development and adoption of secure-by-default patterns, guardrails, and paved roads that scale security without increasing friction; Operate and improve security tooling by tuning signal quality, reducing noise, and identifying opportunities to improve effectiveness; Build or extend security tooling and automation to eliminate manual or repetitive work; Clearly communicate risks, tradeoffs, and recommendations to engineering partners in a way that supports informed decision-making; Proactively identify gaps or inefficiencies in security processes and suggest practical improvements aligned with team goals; Mentor junior engineers and new hires, helping them ramp up effectively and understand how Product Security operates at OutSystems; Strengthen stakeholder relationships within your area of responsibility by being reliable, pragmatic, and outcome-oriented

Requirements

Proven experience executing application security work in modern, cloud-native environments; Strong grounding in application security fundamentals, including secure design and threat modeling and vulnerability intake, triage, collaborative analysis, and remediation; Ability to independently manage and deliver moderately complex security tasks from start to finish; Comfortable working across application security, cloud security, and platform security concerns within a defined scope; Demonstrated ability to write and reason about code, including building or extending security tooling and automation using modern programming languages and acting as a human-in-the-loop to review, validate, and secure AI-generated or low-code–generated code and workflows; Practical experience with AWS, Kubernetes, and microservices architectures; Clear understanding of the differences between penetration testing, red teaming, and purple teaming, and when each is appropriate; Strong communicator able to adapt messaging to different audiences and collaborate effectively across teams; Demonstrated ability to mentor junior colleagues and contribute positively to team culture; Comfortable seeking guidance on ambiguous or novel problems while owning execution and delivery

Nice to have

Practical understanding of AI-enabled and automated systems, including how increased autonomy affects trust boundaries, failure modes, and risk; Experience leveraging AI-assisted development tools, agents, or modern programming languages (such as C#, Python, or JavaScript) to accelerate security tooling and delivery; Experience contributing to or improving secure-by-default patterns, paved roads, or guardrails in a platform or product environment; Exposure to Azure in addition to AWS; Experience improving the signal quality of security tooling by reducing noise and increasing actionability; Prior experience working on developer platforms, low-code platforms, or highly automated systems

Benefits

A company at the vanguard of the agentic revolution; Real growth opportunities through structured development programs; Professional Development Fund and Internal Mobility Program; A global collective of world-class talent and accessible mentors; Inclusive culture