Cyber Security Analyst - Vulnerability & Attack Surface Management

Allianz Technology Se Spain Branch; Barcelona; Hybrid; EUR 42,000 - 65,000; Full time

Benefits offered by this job

Hybrid work model

Bonus scheme

Pension

Employee shares program

Employee discounts

Lifelong learning

Job summary

Allianz Technology is seeking a Cyber Security Analyst to join the Vulnerability Management team. You will identify, assess and mitigate vulnerabilities across Allianz's digital landscape in an international setting.

You will test web applications and APIs with DAST tools, validate submissions for Bug Bounty, and monitor the external attack surface to detect shadow IT. You will advise on remediation and help improve security processes and controls.

Qualifications

• 3+ years in cybersecurity (application security or vulnerability management preferred).
• Hands-on with DAST tools (Burp Suite, OWASP ZAP, AppScan).
• Strong web security knowledge (OWASP Top 10, API security).
• Familiarity with vulnerability management tools (Qualys, Nessus).
• Fluent English; able to work in international environments.

Responsibilities

• Perform web application security testing using DAST tools to identify vulnerabilities in applications and APIs.
• Analyze, validate, and prioritize vulnerabilities based on risk and business impact.
• Support and coordinate Allianz's Bug Bounty Program, including validation of submissions.
• Monitor Allianz's external attack surface to detect shadow IT and potential risks.
• Collaborate with internal teams to ensure timely remediation of vulnerabilities.
• Advise stakeholders on remediation strategies and security best practices.
• Contribute to the continuous improvement of security processes, tools, and standards.

Skills

Experience (3+ years)

DAST tools

Web security

Vulnerability tools

English proficiency

Tools

Burp Suite

OWASP ZAP

AppScan

Qualys

Nessus

Job description

Cyber Security Analyst - Vulnerability & Attack Surface Management

About the job

Passionate about cybersecurity and eager to protect global digital assets?

We are looking for a Cyber Security Analyst to join our Allianz Vulnerability Management (AVM) team, where you will help identify, assess, and mitigate vulnerabilities across Allianz's digital landscape.

Working in an international environment, you will collaborate with internal teams and external partners to strengthen our security posture and drive continuous improvement across key security services.

What you do

• Perform web application security testing using DAST tools to identify vulnerabilities in applications and APIs
• Analyze, validate, and prioritize vulnerabilities based on risk and business impact
• Support and coordinate Allianz's Bug Bounty Program, including validation of submissions
• Monitor Allianz's external attack surface to detect shadow IT and potential risks
• Collaborate with internal teams to ensure timely remediation of vulnerabilities
• Advise stakeholders on remediation strategies and security best practices
• Contribute to the continuous improvement of security processes, tools, and standards

What you bring

• 3+ years of experience in cybersecurity (application security or vulnerability management preferred)
• Hands-on experience with DAST tools (e.g., Burp Suite, OWASP ZAP, AppScan)
• Strong understanding of web security (OWASP Top 10, API security)
• Familiarity with vulnerability management tools (e.g., Qualys, Nessus)
• Fluent English and ability to work in international environments

What we offer

• We offer a hybrid work model which recognizes the value of striking a balance between in-person collaboration and remote working incl. up to 25 days per year working from abroad.
• We believe in rewarding performance and our compensation and benefits package includes a company bonus scheme, pension, employee shares program and multiple employee discounts (details vary by location).
• From career development and digital learning programs to international career mobility, we offer lifelong learning for our employees worldwide and an environment where innovation, delivery and empowerment are fostered.
• Flexible working, health and wellbeing offers (including healthcare and parental leave benefits) support to balance family and career and help our people return from career breaks with experience that nothing else can teach.

About Allianz Technology

With its headquarters in Munich, Germany, Allianz Technology is Allianz's global IT service provider and delivers IT solutions that drive the group's digitalization. With more than 11,000 employees in over 20 countries around the world, Allianz Technology is tasked to run, optimize, transform and innovate the infrastructure, applications and services together with Allianz companies to co-create the best customer experience.

We service the entire spectrum of digitalization - from one of the industry's largest IT infrastructure projects that spans data centres, networks and security, to application platforms ranging from workplace services to digital interaction.

In short: We deliver comprehensive end-to-end IT solutions for Allianz in the digital age. We are the backbone of Allianz.

Find us at: www.linkedin.com/company/allianz-technology.

Commitment to Integrity, Fairness & Inclusion

Allianz Group is one of the most trusted insurance and asset management companies in the world. Caring for our employees, their ambitions, dreams and challenges, is what makes us a unique employer. Together we can build an environment where everyone feels empowered and has the confidence to explore, to grow and to shape a better future for our customers and the world around us.

We at Allianz believe in a strong inclusive culture that encourages people to speak their minds, get involved and question the status quo. We are proud to be an equal opportunity employer and encourage you to bring your whole self to work, no matter where you are from, what you look like, who you love, or what you believe in. We therefore welcome applications regardless of race, ethnicity or cultural background, age, gender, nationality, religion, social class, disability, sexual orientation, or any other characteristics protected under applicable local laws and regulations.