Application Security Specialist

Eucalypto; Barcelona; Presencial; EUR 36.000 - 60.000; Jornada completa

Descripción de la vacante

Eucalypto in Barcelona seeks an Application Security Specialist to secure cloud-native applications and platforms in an international tech environment. You will work with engineering and platform teams to integrate security into the software development lifecycle and strengthen the security posture of digital products.

You will promote DevSecOps across development teams, secure applications, APIs and cloud environments, and integrate security tools into CI/CD pipelines (SAST, DAST, SCA).

Formación

• 4+ years of experience in Application Security, DevSecOps, or Information Security
• Strong knowledge of secure software development, cloud security, and microservices
• Experience with CI/CD security, container security, Kubernetes, and IaC
• Hands-on experience with security tools such as Veracode, SonarQube, Checkmarx, or similar
• Familiarity with cloud platforms (Azure, AWS, or GCP)
• Good communication skills and collaborative mindset
• Fluent English required

Responsabilidades

• Implement and promote DevSecOps practices across development teams
• Secure applications, APIs, microservices, and cloud environments
• Integrate security tools into CI/CD pipelines (SAST, DAST, SCA)
• Support vulnerability management, incident response, and security monitoring
• Improve internal security governance and support ISMS-related initiatives
• Collaborate with developers and platform teams to drive secure development practices

Conocimientos

Application Security

DevSecOps

Cloud security

Kubernetes

CI/CD security

Herramientas

Veracode

SonarQube

Checkmarx

Descripción del empleo

Up to 60k

Application Security Specialist

Overview

We are looking for an Application Security Specialist to help secure modern cloud-native applications and platforms within an international technology environment.

You will work closely with engineering and platform teams to integrate security into the software development lifecycle, improve security processes, and strengthen the overall security posture of digital products.

Responsibilities

• Implement and promote DevSecOps practices across development teams
• Secure applications, APIs, microservices, and cloud environments
• Integrate security tools into CI/CD pipelines (SAST, DAST, SCA)
• Support vulnerability management, incident response, and security monitoring
• Improve internal security governance and support ISMS-related initiatives
• Collaborate with developers and platform teams to drive secure development practices

Requirements

• 4+ years of experience in Application Security, DevSecOps, or Information Security
• Strong knowledge of secure software development, cloud security, and microservices
• Experience with CI/CD security, container security, Kubernetes, and IaC
• Hands-on experience with security tools such as Veracode, SonarQube, Checkmarx, or similar
• Familiarity with cloud platforms (Azure, AWS, or GCP)
• Good communication skills and collaborative mindset
• Fluent English required