Senior Security Engineer - Application Security

About this role

There are NO limits to your career: come shape the future and be part of a truly unique global culture at OutSystems!
As a Senior Security Engineer on the Application Security team at OutSystems, you will independently deliver meaningful security outcomes across our #1 AI-powered low-code platform, helping ensure that applications, platforms, and agentic capabilities are secure by design and safe by default.
In this role, you will own and execute small-to-medium sized security initiatives and deliver significant service components of a large Product Security program. You will partner closely with security, engineering, product, support, digital, legal, sales and enablement, and customer teams; to reduce real customer risk, eliminate recurring vulnerability patterns, and enable teams to move faster because security was already part of the plan.
This role is for a seasoned security engineer who can operate with autonomy, apply foundational security practices effectively in our environment, effectively collaborate and adapt their approach as complexity increases. You will be trusted to deliver quality outcomes end-to-end while mentoring junior team members and strengthening security relationships within your scope.
What You’ll Do

• Independently drive security work across all phases of the SDLC, from early design and threat modeling through implementation, testing, and release.

• Own delivery of moderately complex security projects or features, adjusting standard approaches as needed to achieve the intended outcome.

• Partner with engineering and platform teams to secure AI-powered and agentic capabilities, ensuring security considerations are built in early rather than bolted on later.

• Conduct focused security assessments of applications, APIs, internal services, and platform components using the appropriate depth and methodology for the risk.

• Contribute to the development and adoption of secure-by-default patterns, guardrails, and paved roads that scale security without increasing friction.

• Operate and improve security tooling by tuning signal quality, reducing noise, and identifying opportunities to improve effectiveness.

• Build or extend security tooling and automation to eliminate manual or repetitive work.

• Clearly communicate risks, tradeoffs, and recommendations to engineering partners in a way that supports informed decision-making.

• Proactively identify gaps or inefficiencies in security processes and suggest practical improvements aligned with team goals.

• Mentor junior engineers and new hires, helping them ramp up effectively and understand how Product Security operates at OutSystems.

• Strengthen stakeholder relationships within your area of responsibility by being reliable, pragmatic, and outcome-oriented.

How We Measure Success
As a member of this team, success is measured by outcomes, not motion.
You will be expected to:

• Deliver security improvements that reduce real risk over time

• Shorten exposure windows for meaningful issues within your scope

• Prevent the recurrence of known vulnerability patterns through better design or automation

• Enable engineering teams to ship faster with fewer security surprises

• Improve the quality and trustworthiness of security signal used by teams

• High activity without risk reduction is not success. Quiet systems that work are.

All About You
Required (Must-Have) Qualifications

• Proven experience executing application security work in modern, cloud-native environments.

•
Strong grounding in application security fundamentals, including:

Secure design and threat modeling

• Vulnerability intake, triage, collaborative analysis, and remediation

• Ability to independently manage and deliver moderately complex security tasks from start to finish.

• Comfortable working across application security, cloud security, and platform security concerns within a defined scope.

•
Demonstrated ability to write and reason about code, including:

• Building or extending security tooling and automation using modern programming languages

• Acting as a human-in-the-loop to review, validate, and secure AI-generated or low-code–generated code and workflows

• Practical experience with AWS (required), Kubernetes, and microservices architectures.
Clear understanding of the differences between penetration testing, red teaming, and purple teaming, and when each is appropriate.
Strong communicator able to adapt messaging to different audiences and collaborate effectively across teams.

• Demonstrated ability to mentor junior colleagues and contribute positively to team culture.

• Comfortable seeking guidance on ambiguous or novel problems while owning execution and delivery.

Preferred (Nice-to-Have) Qualifications

• Practical understanding of AI-enabled and automated systems, including how increased autonomy affects trust boundaries, failure modes, and risk.

• Experience leveraging AI-assisted development tools or agents to accelerate delivery while maintaining security and correctness.

• Experience contributing to or improving secure-by-default patterns, paved roads, or guardrails in a platform or product environment.

• Exposure to Azure in addition to AWS.

• Experience improving the signal quality of security tooling by reducing noise and increasing actionability.

• Prior experience working on developer platforms, low-code platforms, or highly automated systems.

Scope and Expectations

• Owns small-to-medium security initiatives or significant components of service delivery for a large program.

• Works independently on day-to-day assignments with limited oversight.

• Adjusts standard procedures when necessary to achieve the desired outcome.

• Impact is primarily at the team and project level, with growing influence through trust and delivery.

• Acts as a role model for “The OutSystems Way” of Product Security through execution, collaboration, and judgment.

Why This Role Matters
OutSystems is building an…