Application Security Specialist (f/m/d)

Axpo group; Madrid; Híbrido; EUR 60.000 - 90.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Flexible working hours

Meal allowances

Internet compensation

Training courses

Gym coverage

Health insurance

Descripción de la vacante

Axpo Group's Application Security team is seeking a seasoned security professional to embed security into development and protect our trading, market intelligence, and quantitative platforms.

You will operate SAST/DAST/SCA tools within CI/CD pipelines (Azure DevOps, GitHub Actions, Jenkins) and guide developers with practical secure coding practices across .NET, Python, Angular, and React.

Formación

• 5+ years of experience in application security, software development, DevSecOps, or related technical role.
• Hands‑on experience integrating security tools into CI/CD environments and operating SAST, DAST, or SCA tools.
• Ability to read and understand code in languages such as .NET, Python, Angular, or React.
• A pragmatic, self‑starter mindset with strong analytical and communication skills, able to explain security topics to non‑security audiences.
• A bachelor's degree in Computer Science, Information Security, Software Engineering, Data Engineering, or a related field.
• Ideally, certifications such as OSCP, eWPT, Burp Suite Certified Practitioner, or DevSecOps credentials, and familiarity with cloud‑native and regulated environments.

Responsabilidades

• Operate application security tools (SAST, DAST, SCA) and ensure scans run correctly within CI/CD pipelines such as Azure DevOps, GitHub Actions, or Jenkins.
• Triage vulnerabilities, filter false positives, and guide development teams through remediation with practical, secure coding advice.
• Support secure development across .NET, Angular, React, and Python‑based applications and scripts.
• Identify security risks in APIs, data pipelines, and model‑driven solutions, and support reviews of access control and data integrity.
• Support secure management of open‑source dependencies, secrets, API keys, and credentials used in automated workflows.
• Deliver practical security awareness and training to development, quantitative, and data engineering teams.

Conocimientos

AppSec experience

CI/CD security

Code reading

Security communication

Bachelor's in CS/InfoSec

Educación

Bachelor's degree in Computer Science/Info Security/Software Engineering

Herramientas

SAST

DAST

SCA

Azure DevOps

GitHub Actions

Jenkins

Descripción del empleo

Help embed security into every line of code at Axpo Solutions. Join our Application Security team and protect the technology powering energy trading, market intelligence, and quantitative development.

What you will do:

• Operate application security tools (SAST, DAST, SCA) and ensure scans run correctly within CI/CD pipelines such as Azure DevOps, GitHub Actions, or Jenkins

• Triage vulnerabilities, filter false positives, and guide development teams through remediation with practical, secure coding advice

• Support secure development across .NET, Angular, React, and Python-based applications and scripts

• Identify security risks in APIs, data pipelines, and model-driven solutions, and support reviews of access control and data integrity

• Support secure management of open-source dependencies, secrets, API keys, and credentials used in automated workflows

• Deliver practical security awareness and training to development, quantitative, and data engineering teams

What you bring & who you are:

• 5+ years of experience in application security, software development, DevSecOps, or a related technical role

• Hands‑on experience integrating security tools into CI/CD environments and operating SAST, DAST, or SCA tools

• Ability to read and understand code in languages such as .NET, Python, Angular, or React

• A pragmatic, self‑starter mindset with strong analytical and communication skills, able to explain security topics to non‑security audiences

• A bachelor's degree in Computer Science, Information Security, Software Engineering, Data Engineering, or a related field

• Ideally, certifications such as OSCP, eWPT, Burp Suite Certified Practitioner, or DevSecOps credentials, and familiarity with cloud‑native and regulated environments

About the team:

Our Application Security team bridges central security strategy with fast‑moving engineering, quant development, and data teams. We value curiosity, pragmatism, and close collaboration over rigid processes, always balancing security with delivery speed.

Benefits:

At our company, we strive to create a culture of continuous learning, personal growth, and inter- national community involvement. We're passionate about providing our employees with the tools and resources they need to succeed, and we're confident that you'll love being part of our team!

• Working Hours
  We offer flexible working hours to accommodate your work schedule. We can work part of our time remotely and the rest at our offices in Madrid, Torre Europa.

• Meal allowances

  You can enjoy delicious meals on us, no matter if you are working remotely or on-site.
  *Option to use it for public transportation or childcare instead.

• Internet Compensation
  We cover the cost of your home internet connection, as we understand how essential connectivity is in the modern workplace.

• Training courses
  Our company is committed to helping our employees grow and develop their skills, which is why we offer a variety of industry- specific training courses and a learning channel.
  

• Gym Coverage
  Stay active and healthy with our 90% coverage benefit, which provides access to the nearby gym: Forus Selection to keep you energized throughout the day
  

• Health Insurance
  We take the health and well-being of our employees seriously, which is why we offer a comprehensive health insurance plan and the option to extend it to your spouse and children.

At Axpo Group, we are dedicated to fostering a culture of non-discrimination, tolerance, and inclusion. As an equal opportunity employer, we welcome applications regardless of race and ethnicity, gender identity and expression, sexual orientation, age, disability, as well as socioeconomic, cultural, and religious background. We are committed to ensuring a respectful and inclusive recruiting process and workplace for everyone.