Application Security Engineer (m/f/d)

Liebherr-Werk Nenzing GmbH; Madrid; Híbrido; EUR 50.000 - 75.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Flexible and hybrid working

Life and accident insurance

Premium private health insurance

Bonus payments for holidays

Training opportunities

Social benefits

Secure workplace

Descripción de la vacante

Liebherr Group is seeking an Application Security Engineer to integrate security into the SDLC, perform security testing, and ensure applications resist cyber threats. Based in Madrid with a hybrid setup requiring at least 40% on-site, you will work with development teams to remediate vulnerabilities and promote secure coding practices.

Ideal candidates hold a Cybersecurity-related degree with 3+ years in the field; CISSP/OSCP and cloud certs are preferred.

Formación

• Bachelor's/Master's in Cybersecurity, Computer Science, or related field.
• 3+ years in cybersecurity, preferably in Application Security.
• CISSP, OSCP and Cloud certs (AWS, Azure, or GCP) preferred.
• English required; German and French are a plus.
• Knowledge of ISO 27001, NIST frameworks and OWASP concepts.

Responsabilidades

• Implement security controls and tools for application security testing (SAST, DAST, IAST).
• Perform vulnerability assessments and penetration testing on applications.
• Collaborate with developers to remediate security issues and enforce secure coding practices.
• Automate security testing within CI/CD pipelines.
• Monitor and respond to application security threats and incidents.
• Maintain security documentation, policies, and compliance requirements.
• Assist in integrating new applications and technologies with secure config.
• Support security awareness programs for development teams.

Conocimientos

Security testing

CI/CD security

Vulnerability assessment

Penetration testing

Secure coding

OWASP

Security documentation

Threat monitoring

Educación

Bachelor's degree

Master's degree

Cybersecurity degree

Herramientas

SAST

DAST

IAST

Vulnerability scanners

Code analysis

CI/CD tools

Descripción del empleo

Work area:

Information technology / Software

Country:

ES

Entry level:

Professionals

Type of contract:

full time

The Application Security Engineer (m/f/d) is responsible for integrating security into the software development lifecycle (SDLC), conducting security testing, and ensuring applications are resilient to cyber threats. They work closely with development teams to identify, remediate, and prevent security vulnerabilities.

We’re looking for an Application Security Engineer to join our growing global team in Madrid and help implement, secure, and evolve the digital backbone of our enterprise. This is your chance to make an impact on projects that touch every corner of our organization - while working in a modern environment that values both collaboration and flexibility.

The working location for this position will be in Madrid city where we are currently setting up a new office. We operate a hybrid model, requiring at least 40% of the working time on-site.

• Implement security controls and tools for application security testing (SAST, DAST, IAST)
• Perform vulnerability assessments and penetration testing on applications
• Collaborate with developers to remediate security issues and enforce secure coding practices
• Automate security testing within CI/CD pipelines
• Monitor and respond to application security threats and incidents
• Maintain security documentation, policies, and compliance requirements
• Support in the integration of new applications and technologies including secure configuration
• Assist in developing security awareness programs for development teams
• Bachelor's/Master's in Cybersecurity, Computer Science, or related field
• 3+ years in cybersecurity, preferrevaluably in Application Security Engineer Role
• Following certificates are preferred; CISSP, OSCP as well as Cloud certifications (AWS, Azure, or GCP)
• English is a Must, German and French are a plus
• Understanding of cybersecurity frameworks and standards (ISO 27001, NIST)
• Deep understanding of application security concepts and principles
• Knowledge of application security tools and techniques (e.g., vulnerability scanners, code analysis tools)
• Expertise in secure coding practices and methodologies
• Knowledge of OWASP framework, defensible architectures

Our commitment to you: your benefits

As an internationally successful family business, the Liebherr Group offers you a secure job, a unique variety of tasks and exciting development opportunities. Become part of our strong team today and get to know the Liebherr Group as a reliable partner. Profit from these benefits:

• Attractive salary and social benefits
• Flexible and hybrid working
• Freedom for creative work
• Safe and secure workplace
• Individual development and training opportunities
• Life and accident insurance
• Exclusive offer for a premium private health insurance package
• Bonus payments for Christmas and holidays, based on the collective agreement

One Passion. Many Opportunities.

The company

Liebherr is a family-run technology company that is not only one of the largest construction machinery manufacturers in the world, but also offers high-quality, user-oriented products and services in many other areas.The Group employs nearly 50,000 people in more than 140 companies on all continents.

Location