DevSecOps / AppSec Engineer — Secure SDLC & Pipelines (Remote)

Aubay Spain; Barcelona; Ibrido; EUR 60.000 - 90.000; Tempo pieno

Descrizione del lavoro

Aubay Spain is seeking a DevSecOps / AppSec Engineer to join an international banking project. You will implement secure CI/CD pipelines, manage vulnerabilities, and automate security workflows across Docker/OpenShift environments.

Required hands-on experience with SAST/DAST/SCA, scripting in Python or Bash, and knowledge of OWASP Top 10. Flexibility to work remotely/hybrid from Spain or France is offered.

Competenze

• 3–4 years of IT experience with at least 2 years in Application Security, DevSecOps, or vulnerability management.
• Hands-on experience integrating SAST, DAST, and SCA tools into the SDLC.
• Strong scripting skills (Python, Bash) for automation in CI/CD pipelines.
• Knowledge of container security (Docker, OpenShift/Kubernetes).
• Familiarity with CVSS, OWASP Top 10, and threat landscapes.
• Fluent in English or French; strong communication with stakeholders.

Mansioni

• Implement, automate, and maintain vulnerability detection in CI/CD workflows (SAST/DAST/SCA).
• Triage and remediate vulnerabilities in third-party libraries and frameworks.
• Develop scripts to automate dependency updates and security workflows.
• Secure deployments in OpenShift/Docker container environments.
• Define secure coding guidelines and report risk status and metrics to security management.
• Provide incident response support for critical vulnerabilities.

Conoscenze

CI/CD security

Python scripting

Shell scripting

OpenShift/Kubernetes security

OWASP Top 10

Git/Jira

English or French communication

Strumenti

SonarQube

Checkmarx

OWASP ZAP

Docker

OpenShift

Kubernetes

Tenable/Qualys/Rapid7

Descrizione del lavoro

Aubay Spain is seeking a DevSecOps / AppSec Engineer to join an international banking project. You will implement secure CI/CD pipelines, manage vulnerabilities, and automate security workflows across Docker/OpenShift environments.

Required hands-on experience with SAST/DAST/SCA, scripting in Python or Bash, and knowledge of OWASP Top 10. Flexibility to work remotely/hybrid from Spain or France is offered.