Application Security Engineer- Chile | US Market

hiberus; Chile; On-site; CLP 28,000,000 - 52,000,000; Full time

Benefits offered by this job

Freelance contracting option

Permanent employment contract with hIB

Job summary

hiberus is seeking an Application Security Engineer to join an international project focused on the US market. You will analyze security findings, validate vulnerabilities, and collaborate with development teams to implement effective remediation strategies across SDLC.

The role emphasizes secure coding practices, SAST/DAST/SCA usage, and CI/CD security integration in a hands-on environment. Excellent English and cross‑functional collaboration are essential.

Qualifications

• Hands-on security experience across SDLC and DevSecOps.
• 3–5 years in Application/Security roles with web apps and APIs.
• Knowledge of SAST, DAST, SCA methodologies and tools.

Responsibilities

• Analyze, validate, and prioritize application security findings.
• Assess exploitability, severity, and business impact.
• Perform secure code reviews and remediation guidance.
• Support integration of security tools into CI/CD pipelines.
• Coordinate testing, validation, and rescans to confirm fixes.
• Document findings, risks, and recommendations clearly.
• Collaborate with developers, QA, DevOps, and InfoSec teams.
• Apply AI tools to assist vulnerability analysis where relevant.
• Maintain security quality gates and third-party risk reviews.

Skills

Application security

Vulnerability assessment

Secure code review

DevSecOps

SAST/DAST/SCA

OWASP Top 10

CI/CD security

Security tooling

English proficiency

Threat modeling

Tools

Checkmarx

SonarQube

Snyk

Fortify

OWASP ZAP

Burp Suite

OpenGrep

Job description

Application Security Engineer | US Market

Hello!

Haven’t heard of hiberus yet? We are a technology company built around one key differentiator: HYPERSPECIALIZATION.

Being part of hiberus means growth, a passion for technology, a drive for innovation, a flexible and collaborative work environment, teamwork, learning, continuous development, motivation, and the opportunity to take on new challenges... and that’s just the beginning.

We have a team of more than 4,700 professionals, 46 areas of specialization, and 35 development hubs across Spain, Europe, Latin America, the United States, and Africa. We are Spain’s leading privately owned technology company. Over the past four years, we have experienced exponential growth, doubling our business volume year after year. This has helped us establish ourselves as a key player in the Spanish technology ecosystem while remaining competitive with international leaders. We are redefining the global technology landscape!

We work hard to transform lives through technology, and we want you to join us as we continue to grow. If you are passionate about IT, enjoy keeping up with the latest technologies, and are looking for a new professional challenge, keep reading because we are looking for you!

What are we looking for?

We are looking for an Application Security Engineer to join an international project focused on the US market. We need someone with hands‑on experience in application security, vulnerability assessment, secure code review, and DevSecOps practices.

The ideal candidate will be able to analyze and validate application security findings, assess their exploitability and business impact, and work closely with development teams to define and implement effective remediation strategies.

This is a hands‑on position for professionals who understand application security throughout the software development lifecycle and can help integrate security practices into development workflows. Above all... at hiberus, we believe in good people!

• Analyze, validate, and prioritize application security findings from different security testing tools.
• Assess vulnerability exploitability, technical severity, and potential business impact.
• Perform secure code reviews to identify security weaknesses and recommend remediation strategies.
• Provide guidance to development teams on secure coding practices and vulnerability remediation.
• Review proposed fixes and supporting evidence to ensure vulnerabilities are properly addressed.
• Coordinate security testing, validation, and rescanning activities to confirm remediation.
• Support the integration of security tools into CI/CD pipelines, including SAST, DAST, SCA, and secrets scanning.
• Contribute to the implementation and maintenance of security quality gates and application security controls.
• Identify and assess risks related to third‑party dependencies and software components.
• Collaborate with Information Security, Development, QA, Infrastructure, and DevOps teams.
• Use AI‑enabled tools where appropriate to support vulnerability analysis, prioritization, and remediation activities.
• Document findings, remediation progress, risks, and technical recommendations.
• Approximately 3–5 years of relevant experience in Application Security, Product Security, or Software Security roles.
• Hands‑on experience with web application and API security testing.
• Strong knowledge of Secure Code Review and secure coding practices.
• Experience identifying, analyzing, prioritizing, and supporting the remediation of application vulnerabilities.
• Knowledge of SAST, DAST, and SCA methodologies and tools.
• Experience with application security tools such as Checkmarx, SonarQube, Snyk, Fortify, OpenGrep, OWASP ZAP, Burp Suite, or equivalent solutions.
• Understanding of OWASP Top 10, common application vulnerabilities, and security testing methodologies.
• Experience with dependency security, secrets detection, and third‑party component vulnerabilities.
• Knowledge of SDLC, DevSecOps, and CI/CD security integration.
• Experience working with CI/CD platforms such as Azure DevOps, GitLab CI/CD, GitHub Actions, Jenkins, or equivalent tools.
• Professional English proficiency for effective communication in an international technical environment.
• Strong analytical, problem‑solving, and communication skills.
• Ability to collaborate with development teams and provide practical security recommendations.

Experience using AI tools to support security analysis and remediation is a plus. Relevant certifications such as OSCP, OSWE, GPEN, or eWPTX are also valued.

This opportunity is open exclusively to candidates based in Chile.

Candidates may choose between a freelance contract or a permanent employment contract directly with hiberus.

Business hours aligned with the Boston time zone.

What do we offer?

• The opportunity to work on an international project focused on the US market.
• Flexible contracting options: freelance or permanent employment directly with hiberus.
• The opportunity to work with application security, DevSecOps, and secure software development practices.
• Collaboration with multidisciplinary teams and professionals specialized in different technology areas.
• A technical environment where you can contribute directly to strengthening application security and improving development processes.

At hiberus, we are experiencing explosive growth and we want you to be part of our team.