AI-Driven AppSec Engineer (Hybrid/Remote)

Contentsquare; Bellprat; Presencial; EUR 60.000 - 90.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Virtual onboarding

Hackathon

Work flexibility: hybrid and remote

Generous paid time-off

Lifestyle allowance

Culture Crew in every country

Stock options

Employee Resource Groups

Descripción de la vacante

Contentsquare is seeking an Application Security Engineer (AppSec) to collaborate with product managers and development teams across global SaaS applications from our Barcelona office. You will lead automated security audits, perform security-focused code reviews, and mentor engineers on secure coding practices.

You will architect and manage the vulnerability lifecycle, drive AI-enabled security workflows, and advance shift-left security with security-as-code tools.

Formación

• 3+ years of professional experience in Application Security Operations within high-growth SaaS or cloud-native environments.
• Advanced proficiency with NestJS, Vue.js, and Angular frameworks.
• Hands‑on experience with enterprise security tooling including Snyk, Datadog ASM/AppSec (WAF), Google SecOps, and CrowdStrike.
• Deep architectural understanding of AWS and Azure environments, including Kubernetes/Docker container security and Terraform.
• Demonstrated ability to apply AI/LLM technologies to automate security tasks such as automated vulnerability validation or code analysis at scale.
• Proficiency in scripting and development (Python, Node.js, Shell) to build custom security tooling and integrations.
• Comprehensive knowledge of web protocols, OWASP Top 10, MITRE ATT&CK, and NIST CSF.
• Proven track record in ethical hacking, CTFs, or bug bounty programs.
• Excellent cross-functional collaboration and ability to communicate risks to technical and non-technical stakeholders.
• Fluency in English is mandatory.

Responsabilidades

• Conduct continuous, automated security audits of global SaaS applications to identify misconfigurations and enforce security benchmarks.
• Serve as a strategic security consultant to product and engineering teams, facilitating threat modeling sessions and AppSec reviews during design.
• Perform deep-dive, security-focused code reviews and mentor developers on secure coding patterns.
• Architect and manage end-to-end vulnerability lifecycle; develop automation for triage, reporting, and remediation tracking.
• Orchestrate AI-driven security workflows to scale vulnerability discovery within CI/CD pipelines.
• Lead Shift-Left initiatives by embedding security into automation; develop security-as-code tools.
• Oversee private and public bug-bounty programs; engage with the researcher community.
• Coordinate external penetration testing and security assessments; be primary contact for complex inquiries.
• Drive incident response; perform root-cause analysis to prevent recurrence.

Conocimientos

AppSec operations

Threat modeling

Security automation

Python

Node.js

Security tooling

Cloud security

Herramientas

Snyk

Datadog ASM/AppSec

Google Cloud SecOps

CrowdStrike

Terraform

Kubernetes

Docker

Descripción del empleo

Contentsquare is seeking an Application Security Engineer (AppSec) to collaborate with product managers and development teams across global SaaS applications from our Barcelona office. You will lead automated security audits, perform security-focused code reviews, and mentor engineers on secure coding practices.

You will architect and manage the vulnerability lifecycle, drive AI-enabled security workflows, and advance shift-left security with security-as-code tools.