AppSec Lead: Drive Secure SDLC & DevSecOps Enablement

Awin Global; Madrid; Híbrido; EUR 70.000 - 100.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Flexi-Week program

Hybrid/Remote working scheme

Remote work equipment allowance

Health and Wellbeing initiatives

Awin Academy training

Descripción de la vacante

Awin Global is hiring an AppSec Lead in Madrid to establish and lead a comprehensive application security program. You will evangelize AppSec across Product & Technology, own training, and scale a Security Champions program to embed a DevSecOps mindset.

You will integrate security tooling into CI/CD and IDEs, conduct threat modelling, guide secure coding practices, and manage vulnerability lifecycles while collaborating with product managers and engineers across the organisation.

Formación

• 5+ years in application security or related technical roles.
• Experience working directly with software engineers and product managers to secure web applications.
• Experience in working within an Agile environment.
• Good working proficiency in spoken and written English.
• Excellent interpersonal skills and ability to clearly communicate at every level of the organisation.
• Mentorship and training skills.
• Ability to work across two different departments with multiple touch points.
• Coding proficiency in languages such as JS, PHP, Python.
• Experience with Cloud Native environments (AWS), Containers and Terraform.
• Hands on experience with DAST, SAST, SCA tools, reporting and dashboarding platforms.

Responsabilidades

• Secure the SDLC by integrating security tooling (SAST, DAST, SCA) into CI/CD pipelines and IDEs, and automating checks.
• Conduct threat modelling sessions and secure design reviews with product and engineering teams.
• Guide developers on secure coding practices and perform targeted code reviews with remediation support.
• Manage vulnerability lifecycle across internal and external apps and coordinate with engineers to close gaps.
• Provide guidance on secure AI/ML development and manage risks like prompt injection and data leakage.
• Support incident response investigations and contribute to after-action reviews and mitigation plans.
• Champion security culture, deliver workshops, and develop playbooks and internal standards.
• Stay ahead of threats and propose innovative ideas to reduce risk in software supply chain.

Conocimientos

Application security

Agile experience

English proficiency

Mentorship and training

Cross-department collaboration

Coding (JS, PHP, Python)

Cloud Native AWS

Containers

Terraform

DAST SAST SCA tools

Herramientas

SAST

DAST

SCA tools

CI/CD tooling

Terraform

AWS

Containers

Descripción del empleo

Awin Global is hiring an AppSec Lead in Madrid to establish and lead a comprehensive application security program. You will evangelize AppSec across Product & Technology, own training, and scale a Security Champions program to embed a DevSecOps mindset.

You will integrate security tooling into CI/CD and IDEs, conduct threat modelling, guide secure coding practices, and manage vulnerability lifecycles while collaborating with product managers and engineers across the organisation.