Application Security Specialist

Hybrid

Lisbon, PortugalPosted 2 months agoWebsite

Apply on LinkedIn →

At a Glance

7+ years experienceCI/CDSASTDASTSCACS/Security Degree

About This Role

We are hiring an Application Security Specialist to join the Global CISO Office at Randstad to orchestrate and scale secure development across our global front-office business applications. This is an architectural, governance, and enablement role, focusing on "security by design" with developer teams, rather than a hands-on code development or standard IT support position. As part of the Global CISO Office, you will establish a "security by design" mindset across international development squads building Randstad's next-generation global front-office applications. You will ensure that applications are secure from project conception to final deployment. Primary Location: Hybrid presence is required at Portugal. Working Conditions & Time Zone: This role requires full availability during Central European Time (CET) business hours.

Responsibilities

Embed Security by Design: Maintain secure development across the entire software development lifecycle (SDLC) and architectural design patterns.
Enable Developer Squads: Direct project squads and engineering teams with secure design patterns, helping them evaluate the security impacts of design decisions.
Co-Design the Global SOC: Partner with security peers to threat model, design, and implement the operating model, processes, and governance for Randstad's global business application Security Operations Center (SOC).
Stakeholder Alignment: Map out security requirements with cross-functional internal and external stakeholders (business, marketing, global IT) to embed them directly into product roadmaps and architectures.
Advocate for Compliance: Act as a champion for building a highly secure, compliant ecosystem aligned with organizational policies and Data Privacy legislation.

Requirements

CI/CDSASTDASTSCA

Bachelor's or Master's degree in Information Technology, Computer Science, or an equivalent technical qualification.
5 to 7 years of experience as a Security Specialist or Security Engineer, with a track record of architecting secure solutions in a complex, global enterprise environment.
Extensive knowledge of full-stack architectures, REST APIs, modern web technologies, and security patterns.
Deep familiarity with CI/CD automated software delivery pipelines and application security testing tools (SAST, DAST, and SCA).
Proven ability to translate complex security and data privacy requirements into scalable technical solutions while managing executive, business, and tech stakeholders.
Hands-on experience working directly within Salesforce security and configuration (preferred)

Benefits & Perks

Competitive Compensation: A strong, competitive base salary paired with attractive corporate benefits.

Global Impact, Local Culture: Join the global leader in HR services (over 38,000 employees across 38 countries) while enjoying a vibrant, open-minded, and entrepreneurial team culture.

Work-Life Balance & Security: Strong job security with an emphasis on taking care of each other and respecting work-life balance.

Growth and Diversity: Access to comprehensive learning and development opportunities. 47% of global management team is female.

About Randstad Enterprise

Randstad Enterprise is a global talent solutions provider and a subsidiary of Randstad N.V., the largest staffing and recruitment company by revenue. Headquartered in Diemen, the Netherlands, Randstad Enterprise focuses on delivering comprehensive talent solutions that help organizations create sustainable business value. The company employs approximately 2,000 to 5,000 people and supports over 150,000 clients and 1.7 million talent annually. The company offers a wide range of integrated services in three main areas: Talent Acquisition, Talent Development, and Talent Transition. Their solutions include recruitment process outsourcing, managed service provider offerings, career coaching, and outplacement services. Randstad Enterprise serves various industries, including large enterprises, public sector organizations, technology companies, healthcare, and manufacturing, emphasizing equitable opportunities and data-driven insights. With a strong presence in 39 markets, Randstad Enterprise is dedicated to enhancing workforce capabilities and supporting organizations through periods of change.

Industry

human resources

Employees

7,000

77 engineers

Website

Visit →

Security at Randstad Enterprise

Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.

3 Intel Signals

Security Philosophy

The public company statement defines security around safeguarding customer data, security best practices, SOC 2 Type II controls, recurring vulnerability testing, and third-party validation.
Development controls are described as security checkpoints covering design, coding, testing, and deployment.
The public record does not document a developer-first, paved-road, security-champion, or explicit gatekeeping philosophy.
Risk handling includes vulnerability scans, ethical disclosure, penetration testing, risk-based reward severity, and remediation.
The clearest stated operational goal is improving vulnerability-report routing and remediation so reports are processed faster and communication is more efficient.
Claims from company pages are .
Claims from the Intigriti program update are.

Security Team

Publicly identifiable security leadership includes Jozsef Biro, Chief Information Security Officer; Vishwas Shah, Associate Director, Information Security; and András Rákos, Senior Manager Information Security . Additional public profiles identify Abhijeet Biswas and Zsuzsanna Pongrácz in information-security compliance roles . The CISO profile assigns global security vision, strategy, risk governance, and direction of the IT Security Pillar within the Enterprise Digital Office . Team-size estimate: at least 5 publicly identifiable security personnel; a reliable total is not publicly available. Active Randstad Enterprise-specific AppSec postings located: 0. No Randstad Enterprise-specific AppSec posting was found to establish recurring skill or tool requirements

Key Initiatives

Security assurance: SOC 2 Type II certification and security controls covering confidentiality, availability, and security.
Secure SDLC: security checkpoints across design, coding, testing, and deployment, with internal security working with external researchers.
Vulnerability intake: recurring application and infrastructure scans, static code analysis, third-party penetration tests, responsible disclosure, and a bug-bounty or vulnerability-disclosure program.
Triage and remediation: the disclosure policy commits to a response within 3 business days with an expected resolution date.
The program update documents processing, validation, triage, rewards, and remediation routing.
Recent initiative: the vulnerability-disclosure program temporarily paused new submissions from July 1 through September 1 to upgrade internal routing and remediation processes.
A 2026 update also announced a dedicated bug-bounty program for a new project.
Security awareness: onboarding information-security and privacy training plus an annual Information Security Week.
Security champions: No Evidence Found.

Preparing for an AppSec interview?

Get the weekly briefing 2,000+ security pros trust.

Interested in this role?

Apply on LinkedIn