Application Security Engineer (m/f/d)

Liebherr Group; Madrid; Híbrido; EUR 55.000 - 75.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Attractive salary and social benefits

Flexible and hybrid working

Freedom for creative work

Safe and secure workplace

Descripción de la vacante

The Liebherr Group seeks an Application Security Engineer to integrate security into the SDLC, run security testing, and safeguard applications from threats. Based in Madrid with a hybrid model requiring at least 40% on-site, you’ll partner with development teams to remediate and prevent vulnerabilities.

Responsibilities include implementing SAST/DAST/IAST, conducting assessments, automating security tests in CI/CD, and maintaining security documentation.

Formación

• Bachelor’s/Master’s in Cybersecurity, Computer Science, or related field.
• 3+ years in cybersecurity, preferably in Application Security.
• Preferred CISSP, OSCP and cloud certifications (AWS, Azure, or GCP).
• English is a Must, German and French are a plus.
• Understanding of cybersecurity frameworks and standards (ISO 27001, NIST).
• Deep understanding of application security concepts and principles.
• Knowledge of application security tools and techniques (e.g., vulnerability scanners, code analysis tools).
• Expertise in secure coding practices and methodologies.
• Knowledge of OWASP framework, defensible architectures.

Responsabilidades

• Implement security controls and tools for application security testing (SAST, DAST, IAST)
• Perform vulnerability assessments and penetration testing on applications
• Collaborate with developers to remediate security issues and enforce secure coding practices
• Automate security testing within CI/CD pipelines
• Monitor and respond to application security threats and incidents
• Maintain security documentation, policies, and compliance requirements
• Support in the integration of new applications and technologies including secure configuration
• Assist in developing security awareness programs for development teams

Conocimientos

Application security

Secure coding

OWASP

CI/CD security

Vulnerability assessment

Threat monitoring

Documentation

English proficiency

Educación

Bachelor's/Master's in Cybersecurity, Computer Science

Herramientas

Vulnerability scanners

Code analysis tools

Security monitoring tools

Secure configuration management

Descripción del empleo

The Application Security Engineer (m/f/d) is responsible for integrating security into the software development lifecycle (SDLC), conducting security testing, and ensuring applications are resilient to cyber threats. They work closely with development teams to identify, remediate, and prevent security vulnerabilities.

We’re looking for an Application Security Engineer to join our growing global team in Madrid and help implement, secure, and evolve the digital backbone of our enterprise. This is your chance to make an impact on projects that touch every corner of our organization—while working in a modern environment that values both collaboration and flexibility.

The working location for this position will be in Madrid city where we are currently setting up a new office. We operate a hybrid model, requiring at least 40% of the working time on-site.

Creating passion: your responsibilities

• Implement security controls and tools for application security testing (SAST, DAST, IAST)


• Perform vulnerability assessments and penetration testing on applications


• Collaborate with developers to remediate security issues and enforce secure coding practices


• Automate security testing within CI/CD pipelines


• Monitor and respond to application security threats and incidents


• Maintain security documentation, policies, and compliance requirements


• Support in the integration of new applications and technologies including secure configuration


• Assist in developing security awareness programs for development teams

Contributing your strengths: your qualifications

• Bachelor’s/Master’s in Cybersecurity, Computer Science, or related field


• 3+ years in cybersecurity, preferreably in Application Security Engineer Role


• Following certificates are preferred; CISSP, OSCP as well as Cloud certifications (AWS, Azure, or GCP)


• English is a Must, German and French are a plus


• Understanding of cybersecurity frameworks and standards (ISO 27001, NIST)


• Deep understanding of application security concepts and principles


• Knowledge of application security tools and techniques (e.g., vulnerability scanners, code analysis tools)


• Expertise in secure coding practices and methodologies


• Knowledge of OWASP framework, defensible architectures

Our commitment to you: your benefits

As an internationally successful family business, the Liebherr Group offers you a secure job, a unique variety of tasks and exciting development opportunities. Become part of our strong team today and get to know the Liebherr Group as a reliable partner. Profit from these benefits:

• Attractive salary and social benefits


• Flexible and hybrid working


• Freedom for creative work


• Safe and secure workplace
  

  One Passion. Many Opportunities.

  
  

  The Company

  
  

  Liebherr is a family-run technology company that is not only one of the largest construction machinery manufacturers in the world, but also offers high-quality, user-oriented products and services in many other areas. The Group employs nearly 50,000 people in more than 140 companies on all continents.

  
  

  Location

  
  

  Liebherr IT Shared Service Centre Ibérica, S.L.
  Madrid
  Spain (ES)

  
  

  Contact

  
  

  Karoliina Rissanen
  [e-mail]