Application Security Engineer – Cloud & AI Infra

Jobgether; Málaga; Presencial; EUR 60.000 - 90.000; Jornada completa

Descripción de la vacante

Jobgether is seeking an Application Security Engineer based in Spain to join a high-impact security engineering team. You will protect cloud-native applications and AI platforms by integrating security in the SDLC and leading vulnerability remediation across distributed engineering teams.

You will conduct both manual and automated testing, drive threat modeling sessions, and contribute to secure coding standards. Strong English, hands-on security expertise, and 4+ years in the field are required.

Formación

• Minimum of 4 years in application security or related roles.
• Strong knowledge of OWASP Top 10 and web vulnerabilities.
• Proficient in Go or Python; willingness to learn more tech.
• Experience with Burp Suite, OWASP ZAP, Semgrep.
• Experience performing threat modeling and risk assessments.
• Understanding of SAML, OAuth, and OIDC protocols.
• Excellent English communication and collaboration skills.
• Able to work independently in distributed teams.
• OSCP/OSWE are a plus.

Responsabilidades

• Identify, analyze, and remediate application security vulnerabilities using ASPM tools.
• Build and enhance ASPM tools, rules, and automation for security across teams.
• Integrate security into the SDLC with development and platform teams.
• Conduct manual and automated penetration testing of apps and infra.
• Lead threat modeling sessions and risk assessments for apps.
• Develop secure coding standards and guidelines for engineers.
• Serve as SME in application security for internal teams.
• Stay updated on threats, vulnerabilities, and mitigations.
• Improve security processes, automation, and tooling.

Conocimientos

OWASP Top 10

Threat modeling

Go

Python

Security testing

English communication

Distributed collaboration

OAuth/OIDC

Educación

Security certifications (OSCP/OSWE) advantageous

Herramientas

Burp Suite

OWASP ZAP

Semgrep

Descripción del empleo

Jobgether is seeking an Application Security Engineer based in Spain to join a high-impact security engineering team. You will protect cloud-native applications and AI platforms by integrating security in the SDLC and leading vulnerability remediation across distributed engineering teams.

You will conduct both manual and automated testing, drive threat modeling sessions, and contribute to secure coding standards. Strong English, hands-on security expertise, and 4+ years in the field are required.