Application Security Engineer - Barcelona

Contentsquare; Barcelona; Híbrido; EUR 90.000 - 120.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Hybrid/Remote policy

Generous PTO

Stock options

Employee Resource Groups

Hackathon & onboarding

Descripción de la vacante

Contentsquare is seeking an Application Security Engineer to strengthen security across its global SaaS products based in Barcelona. You will partner with product and engineering teams to embed robust security practices from design through deployment.

Lead threat modeling, secure coding reviews, and vulnerability management; drive AI-powered security workflows in CI/CD; mentor developers and coordinate bug-bounty and external tests.

Formación

• 3+ years in Application Security Operations in a high-growth SaaS or cloud-native environment.
• Strong hands-on with NestJS, Vue.js, and Angular.
• Proficiency with Snyk, Datadog ASM/AppSec, Google SecOps, and CrowdStrike.
• Experience with AWS and Azure, Kubernetes/Docker security, and Terraform IaC.
• Fluency in English and excellent cross-functional collaboration.
• Knowledge of OWASP Top 10, MITRE ATT&CK, and NIST CSF.
• Experience in ethical hacking, CTFs, or bug bounty.

Responsabilidades

• Run continuous automated security audits of global SaaS applications to detect misconfigurations and enforce benchmarks.
• Act as security advisor to product and engineering teams, guiding threat modeling and AppSec reviews during design.
• Lead in-depth secure coding reviews and mentor developers on secure patterns.
• Architect and manage end-to-end vulnerability lifecycle across cloud and app layers with automation.
• Implement AI-driven security workflows to automate vulnerability discovery and validation in CI/CD.
• Drive shift-left initiatives by adding security checks to the automation stack and creating security-as-code tools.
• Oversee private and public bug-bounty programs and coordinate with researchers for high-quality engagement.
• Coordinate external penetration testing and customer security assessments as primary technical contact.
• Respond to application-layer security incidents with root-cause analysis and defensive improvements.

Conocimientos

Threat modeling

Secure coding practices

AppSec reviews

Scripting

Cross-functional collaboration

Communication

English fluency

Herramientas

NestJS

Vue.js

Angular

Snyk

Datadog ASM

Google SecOps

CrowdStrike

Terraform IaC

Kubernetes

Docker

Descripción del empleo

In this role you will strengthen the security of Contentsquare’s global SaaS products. You will partner with product and engineering teams to embed robust security practices across design, development, and deployment. You will lead threat modeling, secure-code reviews, and vulnerability management to prevent and mitigate risks. You will leverage automation and AI to scale security workflows within CI/CD and champion security-as-code. This position offers impact at scale within a security-first culture that values collaboration and continuous improvement.

• Hybrid/remote work policies
• Generous paid time-off
• Stock options
• Employee Resource Groups
• Hackathon and virtual onboarding
• Run continuous automated security audits of global SaaS applications to detect misconfigurations and enforce benchmarks
• Act as security advisor to product and engineering teams, guiding threat modeling and AppSec reviews during design
• Lead in-depth secure coding reviews and mentor developers on secure patterns
• Architect and manage end-to-end vulnerability lifecycle across cloud and app layers with automation
• Implement AI-driven security workflows to automate vulnerability discovery and validation in CI/CD
• Drive shift-left initiatives by adding security checks to the automation stack and creating security-as-code tools
• Oversee private and public bug-bounty programs and coordinate with researchers for high-quality engagement
• Coordinate external penetration testing and customer security assessments as primary technical contact
• Respond to application-layer security incidents with root-cause analysis and defensive improvements
• 3+ years in Application Security Operations in a high-growth SaaS or cloud-native environment
• Proficiency with NestJS, Vue.js, and Angular
• Experience with Snyk, Datadog ASM/AppSec (WAF), Google SecOps, and Crowdstrike
• Strong understanding of AWS and Azure, Kubernetes/Docker security, and Terraform IaC
• Ability to apply AI/LLM tech to automate security tasks
• Scripting experience (Python, Node.js, Shell) for building security tooling
• Knowledge of web protocols, OWASP Top 10, MITRE ATT&CK, and NIST CSF
• Experience in ethical hacking, CTFs, or bug bounty
• Excellent cross-functional collaboration and ability to explain risks to non-technical stakeholders
• Fluency in English
• communication
• analytical rigor
• AppSec
• Threat modeling
• Secure coding

Application Security Engineer - barcelona barcelona, catalunya, es