Application Security Engineer — Proactive Pen Testing

Factorial; Barcelona; Híbrido; EUR 40.000 - 55.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Private health insurance

Wellhub gym access

Office breakfast

Descripción de la vacante

Factorial is seeking an Application Security Engineer to proactively hunt vulnerabilities across its applications, APIs, and AI-powered features. You will work with Product and Engineering to remediate findings, improve secure coding, and scale security through automation.

The role emphasizes collaboration with cross-functional teams, triage of bug bounty reports, and advancement of security tooling within a fast-moving AI-native company based in Barcelona. Fluency in English is required.

Formación

• 3+ years of professional experience in Application Security, Offensive Security, or Penetration Testing.
• Degree in Engineering or Computer Science and strong knowledge of web apps, databases, networks, and OS.
• Strong knowledge of cybersecurity fundamentals, CVSS, testing methodologies, and tooling.
• Fluency in scripting or programming languages used in security testing and automation (Python or Bash).
• Curiosity and ability to learn across different security problems; not needing to master every tech.

Responsabilidades

• Perform proactive penetration testing across Factorial’s applications, APIs, infrastructure, and AI-powered features.
• Reproduce and validate vulnerability reports submitted by third parties (e.g., bug bounty).
• Collaborate with development teams to remediate findings and improve secure coding practices.
• Improve triage and remediation of vulnerabilities from bug bounty reports, internal testing, automated controls, and external research.
• Build and improve security automations, agents, and CI/CD controls for engineering teams.

Conocimientos

Penetration testing

Web application security

Python

Bash

English fluency

Educación

Engineering or Computer Science degree

Herramientas

Ruby on Rails

Descripción del empleo

Factorial is seeking an Application Security Engineer to proactively hunt vulnerabilities across its applications, APIs, and AI-powered features. You will work with Product and Engineering to remediate findings, improve secure coding, and scale security through automation.

The role emphasizes collaboration with cross-functional teams, triage of bug bounty reports, and advancement of security tooling within a fast-moving AI-native company based in Barcelona. Fluency in English is required.