Application Security Specialist II (Remote)

Concentrix CVG Customer Management Colombia S.A.S.; Bogotá; Remote; COP 70,000,000 - 120,000,000; Full time

Job summary

Concentrix CVG Colombia is seeking a Specialist II, Application Security to strengthen security across the SDLC. You will partner with Security, DevOps, and Development teams to embed secure coding practices, automate security testing, and support timely remediation of vulnerabilities across APIs and internet-facing assets.

The role focuses on advancing DevSecOps maturity by integrating security tools, improving CI/CD controls, and maintaining thorough documentation of findings and actions.

Qualifications

• Experience in application security within SDLC.
• Familiarity with security testing tools like SAST, DAST, and SCA.
• Knowledge of API security concepts and access controls.
• Ability to collaborate with Security, DevOps, and Development teams.
• Understanding of OWASP and NIST standards.

Responsibilities

• Bridge between Security, DevOps, and Development to embed security in SDLC.
• Promote secure coding practices and identify security gaps.
• Provide training on secure coding and security tools in CI/CD.
• Support and enhance DevSecOps with automated security testing.
• Integrate SAST, DAST, and SCA in CI/CD pipelines.
• Drive automation for application security assessments and API testing.
• Support internet-facing asset discovery and vulnerability identification.
• Monitor and manage risks for internet-facing apps, MFA and SSO.
• Track and remediate vulnerabilities across SAST, DAST, SCA, APIs.
• Report remediation progress and ensure timely closure.
• Collaborate on root cause analysis and security control improvements.
• Maintain security docs and pipeline updates.
• Ensure alignment with OWASP/NIST.

Skills

Secure coding practices

DevSecOps

CI/CD pipelines

Vulnerability management

SAST/DAST/SCA

API security

OWASP/NIST knowledge

Cross-functional collaboration

Tools

SAST tools

DAST tools

SCA tools

CI/CD tooling

Job description

Concentrix CVG Colombia is seeking a Specialist II, Application Security to strengthen security across the SDLC. You will partner with Security, DevOps, and Development teams to embed secure coding practices, automate security testing, and support timely remediation of vulnerabilities across APIs and internet-facing assets.

The role focuses on advancing DevSecOps maturity by integrating security tools, improving CI/CD controls, and maintaining thorough documentation of findings and actions.