diconium Portugal, unipessoal Lda
diconium has supported industry leaders such as Volkswagen, STIHL, Bosch, Kodak Alaris, and Sick in exploring the potential of digital transformation. We accompany companies throughout the entire digitalization process: from Innovation & Strategy, UX, Data & AI, Commerce and Technology to the creation of digital units. We are eager to generate a lasting and transformative impact!
About company 
Lisbon, Porto
October 23, 2026
Full-time
At Diconium, you will work on projects that connect software, data, AI, and human expertise to create digital products, services, and operating models. You will enable Fortune 500 firms and global market leaders to maximize the impact of their digital initiatives and achieve digital excellence.
O que vais fazer
- You implement, configure, and manage Application Security Testing (AST) solutions, with a strong focus on Static Application Security Testing (SAST) and Software Composition Analysis (SCA) tools such as SonarQube and Black Duck
- You integrate application security tools into software development workflows and CI/CD pipelines, enabling automated security checks throughout the software development lifecycle
- You identify, analyze, and prioritize security vulnerabilities in application source code and third-party dependencies, supporting development teams in implementing effective remediation strategies
- You define and maintain security scanning policies, quality gates, rules, and reporting mechanisms to ensure secure coding practices and compliance with security standards
- You collaborate with software developers, DevOps engineers, and other security stakeholders to promote security by design and improve application security maturity across projects
- You support threat modeling, application security assessments, and continuous improvement of security testing processes, helping teams deliver secure and reliable software products
O que é pedido
- Application security
- SAST tools (SonarQube or similar)
- SCA tools (Black Duck or similar)
- vulnerability management and remediation
- secure software development lifecycle (SSDLC)
- CI/CD security integration
- OWASP Top 10
- knowledge of programming languages (Java / Go / Python)
- secure coding practices
Valorizado
- German language skills
- Dynamic Application Security Testing (DAST)
- cloud security (Azure / AWS)
- DevSecOps
- container security
- software supply chain security
- threat modeling
- dependency and open-source license compliance
O que é oferecido
- Professional & Personal Growth: Develop yourself both professionally and personally through training programs, free language courses, competence centers and an active tech community
- Flexible Work-Life Balance: Benefit from hybrid work, workation, flexible hours, parental support and sabbaticals
- Embrace Diversity & Sustainability: Engage in our Sustainability Hub, diverse communities, Diversity Taskforce and after-work activities
- Comprehensive Benefits: Enjoy public transport tickets, job bikes, health offers, supplementary insurances, a pension plan and various discounts
- powerful tech stack
✸ Benefícios e vantagens (8)
- Apoio educação / infância
- Flex benefits
- Flexibilidade de horário
- Jogos no escritório
- Mais de 22 dias de férias
- Plafond certificações e conferências
- Seguro de saúde
- Suporte psicológico
✸ Valores e cultura (9)
- Ambiente internacional
- Amigos fora do trabalho
- Escritório
- Híbrido
- Igualdade de género
- Incentivo à criatividade & inovação
- Metodologias agéis
- Onboarding técnico
- Tecnologias de ponta
Tags
Similar jobs