Application Security Engineer

Description

Veeam is the Data and AI Trust Company, specializing in helping organizations ensure their data and AI are fully understood, secured, and resilient to enable the acceleration of safe AI at scale. As the market leader in both data resilience and data security posture management, Veeam is built for the convergence of identity, data, security, and AI risk. Headquartered in Seattle with offices in more than 30 countries, Veeam protects over 550,000 customers worldwide, who trust Veeam to keep their businesses running. Join us as we go fearlessly forward together, growing, learning, and making a real impact for some of the world’s biggest brands.

About the Role

Join us as an Application Security Engineer and help shape the security of Veeam products, enhancing data protection and driving business resilience.

Responsibilities

• Conduct regular security assessments, vulnerability scanning, and penetration testing of Veeam products and services
• Work with development teams to integrate secure development practices into the software development lifecycle
• Collaborate on the design and implementation of security within Veeam products
• Threat modelling and design reviews for new and existing Veeam products
• Conducting manual source code security audits
• Using automated application-analysis tools
• What You’ll Bring
• Ability to read source code on programming languages (such as C/C++/C/JavaScript)
• A good understanding of the principles of secure software development
• A desire to develop in the field of application security
• A lively and flexible mind, clear logic, and analytical skills
• The desire and ability to work as part of a team
• English proficiency for daily communication within international teams
• Bonus Skills
• Knowledge of scripting languages (Python, PowerShell, Bash, Ruby, etc.)
• Knowledge of modern cryptographic algorithms
• Experience with DAST and SAST tools
• Skills using OWASP ZAP, Burp Suite, Kali Linux tools
• Certifications such as OSCP, CEH, CSSLP, CCSP, AWS Certified Security, etc.
• Familiarity with cloud platforms (such as AWS/Azure/GCP)
• Experience playing CTF
• Experience with HackTheBox
• Experience with bug bounty hunting
• What You’ll Get
• 24 annual vacation days, plus 4 extra global VeeaMe Days for self-care and 24 paid volunteer hours annually through Veeam Cares
• Private medical, dental, and optical insurance for employees and dependents
• Life and disability insurance worth 2x gross annual salary
• Monthly meal card with €10.46 per working day
• Opportunities to learn and grow through on-demand libraries (LinkedIn Learning, O’Reilly), mentoring, workshops and learning events like our annual Global Day of Learning
• Please note: If the applicant is permanently present outside of Portugal, Veeam reserves the right to refuse to consider the application for a job.
• LI-AR1
• Hybrid
• Veeam Software is an equal opportunity employer and does not tolerate discrimination in any form on the basis of race, color, religion, gender, age, national origin, citizenship, disability, veteran status or any other classification protected by federal, state or local law. All your information will be kept confidential.
• By submitting your application, you confirm that the information provided, including any supporting documents, is complete and accurate to the best of your knowledge. Any misrepresentation, omission, or falsification may result in disqualification from consideration or, if discovered after employment begins, termination of employment.