Specialist II, Application Security (TCF)

Concentrix CVG Customer Management Colombia S.A.S.; Bogotá; Remote; COP 70,000,000 - 120,000,000; Full time

Job summary

Concentrix CVG Colombia is seeking a Specialist II, Application Security to strengthen security across the SDLC. You will partner with Security, DevOps, and Development teams to embed secure coding practices, automate security testing, and support timely remediation of vulnerabilities across APIs and internet-facing assets.

The role focuses on advancing DevSecOps maturity by integrating security tools, improving CI/CD controls, and maintaining thorough documentation of findings and actions.

Qualifications

• Experience in application security within SDLC.
• Familiarity with security testing tools like SAST, DAST, and SCA.
• Knowledge of API security concepts and access controls.
• Ability to collaborate with Security, DevOps, and Development teams.
• Understanding of OWASP and NIST standards.

Responsibilities

• Bridge between Security, DevOps, and Development to embed security in SDLC.
• Promote secure coding practices and identify security gaps.
• Provide training on secure coding and security tools in CI/CD.
• Support and enhance DevSecOps with automated security testing.
• Integrate SAST, DAST, and SCA in CI/CD pipelines.
• Drive automation for application security assessments and API testing.
• Support internet-facing asset discovery and vulnerability identification.
• Monitor and manage risks for internet-facing apps, MFA and SSO.
• Track and remediate vulnerabilities across SAST, DAST, SCA, APIs.
• Report remediation progress and ensure timely closure.
• Collaborate on root cause analysis and security control improvements.
• Maintain security docs and pipeline updates.
• Ensure alignment with OWASP/NIST.

Skills

Secure coding practices

DevSecOps

CI/CD pipelines

Vulnerability management

SAST/DAST/SCA

API security

OWASP/NIST knowledge

Cross-functional collaboration

Tools

SAST tools

DAST tools

SCA tools

CI/CD tooling

Job description

Job Title: Specialist II, Application Security (TCF)

We’re Concentrix. The intelligent transformation partner. Solution-focused. Tech-powered. Intelligence-fueled. The global technology and services leader that powers the world’s best brands, today and into the future. We’re solution-focused, tech-powered, intelligence-fueled. With unique data and insights, deep industry expertise, and advanced technology solutions, we’re the intelligent transformation partner that powers a world that works, helping companies become refreshingly simple to work, interact, and transact with. We shape new game-changing careers in over 70 countries, attracting the best talent. In our Information Technology and Global Security team, you will deliver the latest technology infrastructure, transformative software solutions and industry-leading global security for our staff and clients. You will work with the best in the world to design, implement and strategize IT, security, application development, innovation, and solutions in today’s hyperconnected world. You will be part of the technology team that is core to our vision of develop, build and run the future of Integrated Services. Our game-changers around the world have devoted their careers to ensuring every relationship is exceptional. And we’re proud to be recognized with awards such as "World's Best Workplaces," “Best Companies for Career Growth,” and “Best Company Culture,” year after year. We embrace our game-changers with open arms, people from diverse backgrounds, who are curious and willing to learn. Your natural talent to help others and go beyond WOW for our customers will fit right in with what we do and who we are. Join us and be part of this journey towards greater opportunities and brighter futures.

The Specialist II, Application Security plays a key role in strengthening application security across the software development lifecycle. This role partners closely with Security, DevOps, and Development teams to embed secure coding practices, automate security testing, and support timely vulnerability remediation. The ideal candidate will help advance DevSecOps maturity by integrating security tools, improving CI/CD pipeline controls, and reducing risks across applications, APIs, and internet-facing assets.

Responsibilities

• Serve as a key bridge between Security, DevOps, and Development teams to embed security throughout the SDLC.
• Partner with application developers to promote secure coding practices, identify security gaps, and recommend effective remediation.
• Provide training and guidance to developers on secure coding standards, application security risks, and security tools within CI/CD pipelines.
• Support and enhance DevSecOps practices with a focus on automated security testing across development workflows.
• Integrate and maintain security tools, including SAST, DAST, and SCA, within CI/CD pipelines.
• Drive automation initiatives for application security assessments, including API security testing for authentication, authorization, rate limiting, sensitive data exposure, and access control.
• Support external exposure management, including internet-facing asset discovery, attack surface monitoring, and vulnerability identification.
• Monitor and manage risks related to internet-facing applications, including MFA, SSO, and exposure risks.
• Track, prioritize, and support remediation of vulnerabilities identified through SAST, DAST, SCA, API testing, and external scanning.
• Report on vulnerability remediation progress and help ensure findings are closed within defined timelines.
• Collaborate with cross-functional teams on root cause analysis, security control improvements, and continuous application security enhancements.
• Maintain documentation related to security findings, remediation actions, automation improvements, and DevSecOps pipeline updates.
• Ensure application security practices align with organizational policies and industry standards, including OWASP and NIST.
• Complete all assigned, mandatory training within the timeframe provided.
• Conduct and/or participate in regularly scheduled 1:1 meetings with your direct manager and/or direct reports.

Qualifications

• Experience or working knowledge in application security, DevSecOps, secure SDLC practices, or related security functions.
• Understanding of secure coding practices and common application security risks.
• Familiarity with security testing tools and approaches, including SAST, DAST, and SCA.
• Knowledge of API security concepts, including authentication, authorization, rate limiting, access control, and sensitive data exposure.
• Experience supporting vulnerability management activities, including tracking, prioritization, remediation coordination, and reporting.
• Ability to collaborate effectively with Development, DevOps, and Security teams in a cross-functional environment.
• Familiarity with CI/CD pipelines and the integration of automated security testing into development workflows.
• Understanding of external exposure management, internet-facing application risks, and attack surface monitoring.
• Knowledge of industry security standards and frameworks, including OWASP and NIST.
• Strong documentation, communication, analytical, and problem-solving skills.
• Ability to support root cause analysis and recommend continuous improvements to strengthen application security posture.
• Comfortable providing guidance and training to technical teams on security practices and tooling.

Location

#LI-Remote #WFH Location: COL Bogota - Oficinas y terrazas de

Time Type: Full time

Company Overview

Mission: Hi, we’re Concentrix. We’re a global technology and services leader that powers the brands of the future. We help well-known brands — the ones you use every day — improve their businesses with technology and integrated solutions, in over 70 countries. Company Overview: We power the brands of the future. Some call us a global technology and services leader. But we’re so much more. Human-centered, tech-powered, intelligence fuelled. Every day we’re busy helping over 2000 of the world's best brands solve their toughest business challenges. Whether it’s…… designing game-changing brand experiences, building and scaling secure AI technologies, or building loyalty to drive revenue. We’ve got them covered. But how? We design, build, and run fully integrated, end-to-end solutions across the entire enterprise, at speed and scale. We’re the strategic thinkers who designbrand-defining experiences. The technologists & engineers who buildsmarter solutions. And the operational experts who run it all and make it work seamlessly. By integrating strategy & design with data & analytics, enterprise technology, and digital operations. You could say, at the heart of everything we do lies a commitment to transform the way companies connect, interact, and grow across the world and into the future. Experience the power of Concentrix. Concentrix CVG Corporation is an EEO/AA/M/F/Vet/Disability Employer.