Job Description

Nome da função: Product Security Expert

Localização: Remoto, Portugal

Regime de trabalho: Remoto

Vem fazer parte de um ecossistema dinâmico onde o futuro dos negócios é criado e vivido todos os dias. Faz parte desta transformação!

Na LUZA Group, a paixão, a perseverança e a vontade de superar limites definem o nosso caminho para o sucesso.

Fundada em 2006, somos uma multinacional portuguesa com mais de 1.200 profissionais talentosos e um volume de negócios que supera os 30M€. Com presença em mercados estratégicos como Portugal, Espanha, Marrocos, Brasil, México, Estados Unidos e China, oferecemos soluções inovadoras em engenharia, TI, design, consultoria, Indústria 4.0, formação e recrutamento. Tudo o que fazemos é movido pelo talento das nossas pessoas.

Este é um momento de crescimento e oportunidade. O futuro pertence a mentes visionárias. Vais juntar-te a nós?

Resumo / Visão geral:

In this role, you will focus on identifying, classifying, and validating security findings while contributing to a robust testing strategy and automation framework. You will work closely with internal teams using asynchronous communication and apply both analytical and exploratory approaches to ensure high-quality software delivery.

The role combines application security, vulnerability assessment, and quality assurance, with a strong focus on structured analysis, automation, and cloud environments.

Responsabilidades e Tarefas da Função

• Developing and establishing the Secure Software Development Lifecycle within the company
• Advising internal product teams on secure software development
• Conducting penetration tests and code reviews
• (Further) developing the internal application security toolchain

Requisitos Obrigatórios

• Completed degree in Computer Science or comparable education
• At least 3 years of full-time experience in penetration testing, with a focus on web pentesting
• At least 1-2 years of experience in web development, to assess vulnerabilities in the context of real-world development practices
• Know-how of common tools (e.g., Burp Suite)
• Comprehensive knowledge of web technologies and cloud environments (e.g., Azure)
• Ideally, security certifications with a focus on web, such as OSWE, CWES, CWEE, or comparable
• Experience using AI for code analysis or security automation
• Motivated, ambitious, and able to work independently
• Analytical thinking and enjoyment of solving complex technical challenges
• Confident demeanor toward internal stakeholders, a strong service orientation, and enjoyment of collaborative advisory work
• Strong communication and presentation skills to convey complex technical topics in a way that's clear and tailored to the audience
• Business fluent English skills

#VisionaryFuture - Build the future, join our living ecosystem! 🚀