[Hiring] Senior Security Engineer - Application Security @OutSystems

Role Description

As a Senior Security Engineer on the Application Security team at OutSystems, you will independently deliver meaningful security outcomes across our #1 AI-powered low-code platform, helping ensure that applications, platforms, and agentic capabilities are secure by design and safe by default.

In this role, you will own and execute small-to-medium sized security initiatives and deliver significant service components of a large Product Security program. You will partner closely with various teams to:

• Reduce real customer risk
• Eliminate recurring vulnerability patterns
• Enable teams to move faster because security was already part of the plan

This role is for a seasoned security engineer who can operate with autonomy, apply foundational security practices effectively, collaborate, and adapt their approach as complexity increases.

You will be trusted to deliver quality outcomes end-to-end while mentoring junior team members and strengthening security relationships within your scope.

What You’ll Do

• Independently drive security work across all phases of the SDLC, from early design and threat modeling through implementation, testing, and release.
• Own delivery of moderately complex security projects or features, adjusting standard approaches as needed to achieve the intended outcome.
• Partner with engineering and platform teams to secure AI-powered and agentic capabilities.
• Conduct focused security assessments of applications, APIs, internal services, and platform components.
• Contribute to the development and adoption of secure-by-default patterns, guardrails, and paved roads.
• Operate and improve security tooling by tuning signal quality and reducing noise.
• Build or extend security tooling and automation to eliminate manual or repetitive work.
• Clearly communicate risks, tradeoffs, and recommendations to engineering partners.
• Proactively identify gaps or inefficiencies in security processes and suggest practical improvements.
• Mentor junior engineers and new hires.
• Strengthen stakeholder relationships within your area of responsibility.

How We Measure Success

• Deliver security improvements that reduce real risk over time.
• Shorten exposure windows for meaningful issues within your scope.
• Prevent the recurrence of known vulnerability patterns through better design or automation.
• Enable engineering teams to ship faster with fewer security surprises.
• Improve the quality and trustworthiness of security signal used by teams.

Qualifications

• Proven experience executing application security work in modern, cloud-native environments.
• Strong grounding in application security fundamentals, including:
  • Secure design and threat modeling
  • Vulnerability intake, triage, collaborative analysis, and remediation
• Ability to independently manage and deliver moderately complex security tasks from start to finish.
• Comfortable working across application security, cloud security, and platform security concerns.
• Demonstrated ability to write and reason about code, including:
  • Building or extending security tooling and automation using modern programming languages
  • Reviewing, validating, and securing AI-generated or low-code–generated code and workflows
• Practical experience with AWS (required), Kubernetes, and microservices architectures.
• Clear understanding of the differences between penetration testing, red teaming, and purple teaming.
• Strong communicator able to adapt messaging to different audiences.
• Demonstrated ability to mentor junior colleagues and contribute positively to team culture.
• Comfortable seeking guidance on ambiguous or novel problems while owning execution and delivery.

Preferred (Nice-to-Have) Qualifications

• Practical understanding of AI-enabled and automated systems.
• Experience leveraging AI-assisted development tools or agents.
• Experience contributing to or improving secure-by-default patterns, paved roads, or guardrails.
• Exposure to Azure in addition to AWS.
• Experience improving the signal quality of security tooling.
• Prior experience working on developer platforms, low-code platforms, or highly automated systems.

Scope and Expectations

• Owns small-to-medium security initiatives or significant components of service delivery for a large program.
• Works independently on day-to-day assignments with limited oversight.
• Adjusts standard procedures when necessary to achieve the desired outcome.
• Impact is primarily at the team and project level, with growing influence through trust and delivery.
• Acts as a role model for “The OutSystems Way” of Product Security.

Why This Role Matters

OutSystems is building an AI-powered, agentic future for software development. As systems become more autonomous, Product Security must shift from reactive controls to intentional system design.

As a Senior Security Engineer, you will help make that shift real, ensuring customers inherit strong security by default and teams move faster with confidence.