Application Security & DevSecOps Lead — Hybrid

GMV; Tres Cantos; Híbrido; EUR 55.000 - 90.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Hybrid working model

Relocation package

Career development & training

Wellbeing program

Descripción de la vacante

GMV is seeking a cybersecurity professional to join our team and bridge technical service management with hands-on Application Security and DevSecOps work. You will act as the technical reference and customer point of contact while enhancing SSDLC capabilities, SAST/SCA integration, and secure CI/CD practices.

You will coordinate security gates, drive automation via APIs, and support vulnerability triage and remediation for complex software projects, including AI governance aspects.

Formación

• Solid experience in Application Security, SSDLC and DevSecOps.
• Experience in service or team coordination.
• Familiarity with security controls in CI/CD pipelines.

Responsabilidades

• Technically coordinating the service, managing demand, planning, priorities, capacity, SLAs and KPIs.
• Integrating, configuring and optimizing SAST/SCA controls in CI/CD pipelines.
• Coordinating application onboarding and defining Security Gates.
• Contributing to vulnerability triage, prioritization, remediation and revalidation.
• Acting as the technical point of contact for the customer, providing reporting and service follow‑up.
• Driving automation and industrialization through APIs and scripting.
• Managing risks, incidents, deviations and escalations.
• Advising development teams and coordinating with different technical areas.
• Driving the evolution of the SSDLC/DevSecOps model, including AI adoption.

Conocimientos

Application Security

SSDLC

DevSecOps

SAST/SCA

CI/CD security

OWASP/CWE/CVE

Git/Pipelines/Security Gates

APIs & scripting

Automation

AI governance

Herramientas

Checkmarx

Fortify

SonarQube

Azure DevOps

Jenkins

GitHub Actions

GitLab CI/CD

Cloud

Containers

IaC

Descripción del empleo

GMV is seeking a cybersecurity professional to join our team and bridge technical service management with hands-on Application Security and DevSecOps work. You will act as the technical reference and customer point of contact while enhancing SSDLC capabilities, SAST/SCA integration, and secure CI/CD practices.

You will coordinate security gates, drive automation via APIs, and support vulnerability triage and remediation for complex software projects, including AI governance aspects.