Application Security Analyst - Secure SDLC & Cloud Focus

Valid; Madrid; Hybrid; EUR 45,000 - 65,000; Full time

Benefits offered by this job

Flexible hours

Remote work options

Private medical insurance

Private life insurance

Cafeteria

Job summary

Valid is seeking a Security Operations Analyst in Madrid to proactively assess applications, identify vulnerabilities, and drive remediation within Secure SDLC initiatives across cloud and on‑premises environments. You will work closely with Development, Architecture, and Infrastructure teams to strengthen overall application security posture.

The ideal candidate has a minimum of three years in IT and security, fluent command of English and Spanish, and knowledge of OWASP, vulnerability

Qualifications

• Studies in Computer Science, IT, Cybersecurity or related fields.
• Professional fluency in English and Spanish, both written and spoken.
• Minimum 3 years of experience working with IT and Security systems and cloud deployments.
• Knowledge of Application Security, OWASP, Vulnerability Assessment and Penetration Testing.
• Knowledge of SAST, DAST and SCA tools.
• Strong knowledge of Firewall technologies.
• Knowledge of security resources and controls in Azure and AWS.
• Knowledge of Nessus.
• Experience with code review, Cloud Security, Container Security, Threat Modeling and CI/CD environments will be a plus.
• Strong analytical and technical skills, with the ability to collaborate effectively with different technical teams.
• Ability to work under pressure and manage multiple security-related tasks.
• Availability to travel.

Responsibilities

• Conduct Software Security Assessments, vulnerability assessments, and penetration testing.
• Assess web applications, APIs and internal or third-party developments from a security perspective.
• Review architectures, designs, and code to identify potential security risks and vulnerabilities.
• Identify, validate, and prioritize vulnerabilities and provide clear remediation recommendations.
• Prepare technical security reports and follow up on findings with the relevant teams.
• Contribute to Secure SDLC and Application Security initiatives.
• Support security assessments across cloud and network environments.
• Collaborate with Development, Architecture, and Infrastructure teams to address security findings and improve security practices.

Skills

Application Security

OWASP

Vulnerability Assessment

Penetration Testing

Education

Computer Science / IT / Cybersecurity studies

Tools

Nessus

SAST

DAST

SCA tools

Azure

AWS

Job description

Valid is seeking a Security Operations Analyst in Madrid to proactively assess applications, identify vulnerabilities, and drive remediation within Secure SDLC initiatives across cloud and on‑premises environments. You will work closely with Development, Architecture, and Infrastructure teams to strengthen overall application security posture.

The ideal candidate has a minimum of three years in IT and security, fluent command of English and Spanish, and knowledge of OWASP, vulnerability