CISOC Application Security Engineer

Ambit Iberia; Sant Cugat del Vallès; Híbrido; EUR 50.000 - 70.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Ticket restaurant included in-office

Medical Insurance

Public transport ticket

Childcare support

Gym discounts

Training catalogue

Descripción de la vacante

Ambit Iberia is seeking an Application Security Engineer to join the CISOC team. You will implement and manage SAST tools and support secure software development across the organization.

You will train development teams on secure coding and contribute to policy enforcement, vulnerability management, and reporting. Hybrid work arrangement with on-site Thursdays and remote days aligns with our security-focused objectives.

Formación

• Strong background in DevSecOps, application security, SAST tools, and secure coding practices.
• Experience with CI/CD pipelines (Jenkins) and container orchestration (Kubernetes/OpenShift).
• Proficiency in scripting languages (Python, PowerShell, or Bash).

Responsabilidades

• Implement and manage SAST tools across the organization.
• Conduct security assessments of applications using SAST tools.
• Provide training and guidance to development teams on the use of SAST tools and secure coding practices.
• Participate in the development and enforcement of security policies and procedures.
• Help to formulate vulnerability management frameworks & working structures.
• Perform tasks including research, classification and analysis of security events and vulnerabilities detected.
• Act as point of contact for managing & delivering various vulnerability & remediation reports.
• Collaborate with IT and stakeholders to deliver secure technology solutions supporting business objectives.
• Understand BI framework and follow defined processes, ensuring compliant documentation per SOPs.
• Work with risk and information security teams to present vulnerability management status to leadership.

Conocimientos

DevSecOps

Application security

SAST tools

CI/CD pipelines

Jenkins

Kubernetes

OpenShift

Scripting (Python, PowerShell, Bash)

Herramientas

Jenkins

Kubernetes

OpenShift

Descripción del empleo

We are looking for an Application Security Engineer to join our CISOC team, responsible for implementing and managing SAST tools and supporting secure software development across the organization.

Tasks

• Implement and manage SAST tools across the organization.
• Conduct security assessments of applications using SAST tools.
• Provide training and guidance to development teams on the use of SAST tools and secure coding practices.
• Participate in the development and enforcement of security policies and procedures.
• Help to formulate vulnerability management frameworks & working structures.
• Perform tasks including research, classification and analysis of security events and vulnerabilities detected.
• Act as point of contact for managing & delivering various vulnerability & remediation reports.
• Working in close collaboration with the IT Team members and stakeholders to deliver and implement technology solutions in support of the business objectives to improve productivity and enhance processes and security.
• Understand BI framework and follow defined processes. Ensure compliant documentation requirements and guarantee its production as required according to the SOPs and working instructions.
• Work with various risk & information security teams in presenting vulnerability management status & updates to technology subject matter experts & management.

Must Have

• Strong background in DevSecOps, application security, SAST tools, and secure coding practices
• Experience with CI/CD pipelines (Jenkins) and container orchestration (Kubernetes/OpenShift)
• Proficiency in scripting languages (Python, PowerShell, or Bash)

Nice To Have

• Knowledge of security vulnerabilities, threat mitigation, and remediation processes (triage, prioritization, change management)
• Ability to work in international, multicultural environments with strong English communication skills
• Solid analytical, problem-solving, teamwork, and results-driven mindset
• Familiarity with automation, APIs, and AI in DevOps, including LLMs, agent-based systems, and workflow orchestration
• Relevant security certifications are a plus but not mandatory

Schedule

• 08h-17h from Monday to Friday (flexible)
• 4 days remote, on-site every Thursday.

Conditions

• Salary package based on your profile.
• Ticket restaurant included in-office hours.
• Flexible compensation plan (free of income tax) where we provide you with medical insurance, public transport ticket and childcare check.
• Discounts in gym network.
• Training catalogue.

Our goal is that you are well in every way!