Senior Security Engineer - Application Security

There are NO limits to your career: come shape the future and be part of a truly unique global culture at OutSystems!

As a Senior Security Engineer on the Application Security team at OutSystems, you will independently deliver meaningful security outcomes across our #1 AI-powered low-code platform, helping ensure that applications, platforms, and agentic capabilities are secure by design and safe by default.

In this role, you will own and execute small-to-medium sized security initiatives and deliver significant service components of a large Product Security program. You will partner closely with security, engineering, product, support, digital, legal, sales and enablement, and customer teams; to reduce real customer risk, eliminate recurring vulnerability patterns, and enable teams to move faster because security was already part of the plan.

This role is for a seasoned security engineer who can operate with autonomy, apply foundational security practices effectively in our environment, effectively collaborate and adapt their approach as complexity increases. You will be trusted to deliver quality outcomes end-to-end while mentoring junior team members and strengthening security relationships within your scope.

What You’ll Do

Independently drive security work across all phases of the SDLC, from early design and threat modeling through implementation, testing, and release.

Own delivery of moderately complex security projects or features, adjusting standard approaches as needed to achieve the intended outcome.

Partner with engineering and platform teams to secure AI-powered and agentic capabilities, ensuring security considerations are built in early rather than bolted on later.

Conduct focused security assessments of applications, APIs, internal services, and platform components using the appropriate depth and methodology for the risk.

Contribute to the development and adoption of secure-by-default patterns, guardrails, and paved roads that scale security without increasing friction.

Operate and improve security tooling by tuning signal quality, reducing noise, and identifying opportunities to improve effectiveness.

Build or extend security tooling and automation to eliminate manual or repetitive work.

Clearly communicate risks, tradeoffs, and recommendations to engineering partners in a way that supports informed decision-making.

Proactively identify gaps or inefficiencies in security processes and suggest practical improvements aligned with team goals.

Mentor junior engineers and new hires, helping them ramp up effectively and understand how Product Security operates at OutSystems.

Strengthen stakeholder relationships within your area of responsibility by being reliable, pragmatic, and outcome-oriented.

How We Measure Success

As a member of this team, success is measured by outcomes, not motion.

You will be expected to:

Deliver security improvements that reduce real risk over time

Shorten exposure windows for meaningful issues within your scope

Prevent the recurrence of known vulnerability patterns through better design or automation

Enable engineering teams to ship faster with fewer security surprises

Improve the quality and trustworthiness of security signal used by teams

High activity without risk reduction is not success. Quiet systems that work are.

All About You

Required (Must-Have) Qualifications

Proven experience executing application security work in modern, cloud-native environments.

• •Strong grounding in application security fundamentals, including:
• Secure design and threat modeling

Vulnerability intake, triage, collaborative analysis, and remediation

Ability to independently manage and deliver moderately complex security tasks from start to finish.

Comfortable working across application security, cloud security, and platform security concerns within a defined scope.

Demonstrated ability to write and reason about code, including:

Building or extending security tooling and automation using modern programming languages

Acting as a human-in-the-loop to review, validate, and secure AI-generated or low-code–generated code and workflows

• •Practical experience with AWS (required), Kubernetes, and microservices architectures.
• Clear understanding of the differences between penetration testing, red teaming, and purple teaming, and when each is appropriate.
• Strong communicator able to adapt messaging to different audiences and collaborate effectively across teams.

Demonstrated ability to mentor junior colleagues and contribute positively to team culture.

Comfortable seeking guidance on ambiguous or novel problems while owning execution and delivery.

Preferred (Nice-to-Have) Qualifications

Practical understanding of AI-enabled and automated systems, including how increased autonomy affects trust boundaries, failure modes, and risk.

Experience leveraging AI-assisted development tools or agents to accelerate delivery while maintaining security and correctness.

Experience contributing to or improving secure-by-default patterns, paved roads, or guardrails in a platform or product environment.

Exposure to Azure in addition to AWS.

Experience improving the signal quality of security tooling by reducing noise and increasing actionability.

Prior experience working on developer platforms, low-code platforms, or highly automated systems.

Scope and Expectations

Owns small-to-medium security initiatives or significant components of service delivery for a large program.

Works independently on day-to-day assignments with limited oversight.

Adjusts standard procedures when necessary to achieve the desired outcome.

Impact is primarily at the team and project level, with growing influence through trust and delivery.

Acts as a role model for “The OutSystems Way” of Product Security through execution, collaboration, and judgment.

Why This Role Matters

OutSystems is building an AI-powered, agentic future for software development. As systems become more autonomous, Product Security must shift from reactive controls to intentional system design.

As a Senior Security Engineer, you will help make that shift real. Your work will ensure customers inherit strong security by default, teams move faster with confidence, and security quietly does its job because it was designed in from the start.

If you’re ready to own meaningful security outcomes, mentor others, and help secure the next generation of developer platforms, we’d love to talk.

More about OutSystems

OutSystems is a leading AI Development Platform built for the enterprise. Global organizations trust OutSystems to rapidly build mission-critical apps and agents, modernize legacy processes with agentic systems, and govern their entire AI portfolio across complex regulatory environments, all on one unified platform.

As the future becomes agentic, our customers need us now more than ever. While AI has opened the door to extraordinary possibilities, most large organizations find themselves stuck on one side of the "enterprise gap" because AI by itself doesn't solve their complex use cases and business challenges. OutSystems bridges the "enterprise gap" by combining the speed of generative AI with a deterministic, enterprise-grade framework. We provide the tools for teams of any size to deliver high-quality, reliable AI solutions that drive real business impact.

We are looking for passionate, talented, and motivated people to join us as we empower organizations to build, deploy, and scale the next generation of enterprise software. While we are leading the charge into the agentic era, our mission is broader: we are the platform enterprise leaders trust to evolve their entire business, accelerating innovation through secure, governed human-AI collaboration.

OutSystems is a global company, with more than 900k developer community members, 1,700 employees, more than 600 partners,