Application Security Analyst

Worldwiders Recruitment; Valencia; On-site; EUR 40,000 - 60,000; Full time

Benefits offered by this job

Relocation support

Sponsored flights

Hotel accommodation

HR assistance

Job summary

Worldwiders Recruitment seeks an Application Security Analyst in Valencia to join an international IT services and custom software company. The role is fully on-site, B2B, and focuses on secure code reviews, SAST/DAST testing, and penetration testing for a global telecom project.

Requirements include a bachelor’s in cybersecurity/IT, 3+ years of app security experience, and strong Java with C++/C# knowledge. English fluency is essential, relocation support is provided.

Qualifications

• Bachelor's degree in Cybersecurity, IT, Mathematics or related field.
• At least 3 years of professional experience in application security.
• Proven experience in secure code review, penetration testing, and vulnerability assessment.
• Strong understanding of Java; experience with C++ and/or C#.
• Knowledge of OWASP Top 10, especially SQL injection and XSS.
• Ability to explain vulnerabilities and mitigation options; excellent English.

Responsibilities

• Review business requirements and software architecture to identify security risks.
• Perform manual source code reviews, primarily in Java, with C++/C# codebases.
• Conduct SAST/DAST testing and penetration testing of applications.
• Validate vulnerabilities and verify remediation with development teams.
• Support security throughout the application development lifecycle.

Skills

Java

C++

C#

Education

Bachelor's degree in Cybersecurity, IT, Mathematics

Tools

SAST

DAST

Job description

Valencia, Spain | Fully on-site | B2B contract

Are you passionate about secure code and finding vulnerabilities before they become threats?

Our client, an international IT services and custom software development company, is looking for an Application Security Analyst to support a global telecommunications project in Valencia.

You will collaborate with established Application Security teams, review web application code, and help developers build secure solutions. This role requires hands‑on application security experience, particularly with Java, alongside knowledge of C++ and/or C#.

Your responsibilities

• Review business requirements and software architecture to identify security risks.
• Perform manual source code reviews, primarily in Java, with additional C++ and/or C# codebases.
• Conduct static and dynamic application security testing (SAST and DAST).
• Perform penetration testing and manually validate application vulnerabilities.
• Work closely with development teams to recommend, explain, and verify effective remediation.
• Support security throughout the application development lifecycle.

What you bring

• A bachelor’s degree in Cybersecurity, IT, Mathematics, or a related discipline.
• At least 3 years of professional experience in application security.
• Proven experience in secure code review, penetration testing, and vulnerability assessment.
• Strong understanding of Java and experience with C++ and/or C#.
• Practical knowledge of the OWASP Top 10, particularly SQL injection and Cross‑Site Scripting (XSS).
• The ability to explain vulnerabilities, their impact, and how to prevent or mitigate them.
• Solid knowledge of information security and data protection principles.
• Excellent written and spoken English.
• The ability to work independently and collaborate effectively with technical teams.
• Willingness to relocate to Valencia and work fully from the office.

What’s on offer

• An international telecommunications project with challenging application security work.
• Access to training programs, courses, and certifications.
• Relocation support, including sponsored flights, one week of hotel accommodation, and assistance from the HR team.

Contract and compensation

• B2B engagement, ideally through an entity established in Spain.
• Indicative compensation: USD 4,000–6,000 per month before tax, depending on experience and agreed terms.
• 40 hours per week, fully on-site in Valencia.
• Billing based on actual hours worked.
• 20 days of unpaid leave per year, with flexibility subject to agreement.
• No paid public holidays.

Selection process

The process includes an internal interview and a client interview, with a technical assessment covering secure code review, vulnerability identification, and remediation.