AppSec Engineer: Integrate Security into CI/CD

Altery; España; Hybrid; EUR 60,000 - 80,000; Full time

Benefits offered by this job

Flexible working hours

Core hours 9am-2pm UK time

Wellbeing support

Career growth opportunities

Global team

Job summary

Altery is seeking an Application Security Engineer to join its Cybersecurity team. You will build security into our web, API and mobile products, triaging findings from scanners and Bug Bounty, validating exploits, and helping engineers fix root causes before they reach customers.

You’ll embed SAST, DAST, SCA, and secret detection into CI/CD pipelines, conduct threat modelling, and strengthen our software supply chain. Fluent English is required for technical communication.

Qualifications

• 2+ years in application security engineering or similar role.
• Experience with web and mobile architectures, microservices, containers, CI/CD.
• Knowledge of secure SDLC and security testing methods.

Responsibilities

• Own security findings end to end: triage, validate and assess exploitability.
• Collaborate with developers to fix root causes and reduce risk.
• Integrate SAST/DAST/SCA and secret detection into CI/CD pipelines.
• Review architectures via threat modelling for new features.
• Strengthen software supply chain security and secrets rotation.
• Report monthly on application security posture.

Skills

AppSec Engineer

CI/CD Security

SAST

DAST

SCA

Bug Bounty

Threat Modelling

Secrets management

AWS security

ELK security

Automation scripting

Networking basics

English fluency

Job description

Altery is seeking an Application Security Engineer to join its Cybersecurity team. You will build security into our web, API and mobile products, triaging findings from scanners and Bug Bounty, validating exploits, and helping engineers fix root causes before they reach customers.

You’ll embed SAST, DAST, SCA, and secret detection into CI/CD pipelines, conduct threat modelling, and strengthen our software supply chain. Fluent English is required for technical communication.