Cybersecurity Engineer

Gmv; Madrid; Híbrido; EUR 70.000 - 110.000; Jornada completa

Descripción de la vacante

GMV busca un experto en DevSecOps para avanzar en seguridad automatizada dentro de un equipo de Seguridad de Aplicaciones y SSDLC. Integrarás SAST/SCA en CI/CD, optimizarás controles y apoyarás a los desarrolladores para la remediación de vulnerabilidades.

Se requiere experiencia en DevSecOps, OWASP Top 10 y scripting (Python, PowerShell o Bash), capacidad de analizar vulnerabilidades y mejorar reglas. Trabajo híbrido con movilidad nacional e internacional.

Formación

• Experiencia práctica en seguridad de aplicaciones y DevSecOps con SAST/SCA en CI/CD.
• Conocimientos de CI/CD, Git y repositorios de código.
• Conocimiento de OWASP Top 10, CWE, CVE y CVSS; análisis de vulnerabilidades y falsos positivos.

Responsabilidades

• Automatizar controles SAST/SCA e integrarlos en pipelines CI/CD.
• Configurar, administrar y optimizar herramientas de seguridad y onboarding de aplicaciones a DevSecOps.
• Definir y mantener Security Gates y estrategias de escaneo.
• Analizar vulnerabilidades, gestionar falsos positivos y ajustar reglas de detección.
• Desarrollar integraciones usando APIs y scripting.
• Resolver problemas entre herramientas de seguridad, pipelines e integraciones.
• Apoyar a los desarrolladores en la remediación y revalidación de vulnerabilidades.
• Contribuir a la mejora continua de SSDLC y gestión de credenciales seguras.

Conocimientos

DevSecOps

SAST/SCA

CI/CD

APIs

Python

PowerShell

Bash

Descripción del empleo

Descripción del trabajo

Experteer Overview In this role you will advance automated, scalable DevSecOps within a large organization by embedding security into the SDLC. You’ll work in an Application Security and SSDLC team to evolve security controls from early development stages. You’ll automate SAST/SCA in CI/CD, tune rules, and support remediation with developers. The position offers a hands‑on, collaborative environment focused on continuous improvement of security processes and credentials management, with a clear impact on product security.

Compensaciones / Beneficios

• Automate and integrate SAST/SCA controls into CI/CD pipelines
• Configure, administer, and optimize security tools and onboard applications to DevSecOps
• Define and maintain Security Gates and scanning strategies
• Analyze vulnerabilities, manage false positives, and tune detection rules
• Develop automation and integrations using APIs and scripting
• Troubleshoot issues across security tools, pipelines, and integrations
• Support developers with vulnerability remediation and revalidation
• Contribute to ongoing improvement of SSDLC controls and secure credential management

Responsabilidades

• Practical experience in Application Security and DevSecOps with SAST/SCA in CI/CD environments
• Knowledge of CI/CD, Git, and code repositories
• Understanding of OWASP Top 10, CWE, CVE, and CVSS; vulnerability and false positive analysis
• Secure development and SSDLC with automated controls and Security Gates
• APIs and scripting experience (Python, PowerShell, or Bash)
• Tool and pipeline integration and troubleshooting
• Secure management of credentials, tokens, and secrets
• Ability to analyze code and collaborate with development teams

Requisitos principales

• hybrid working model
• teleworking 8 weeks/year
• flexible start/finish times
• career plan development and training
• national and international mobility
• relocation package available