Hybrid: Application Security Engineer - Secure SDLC & CI/CD

Liebherr Group; Madrid; Híbrido; EUR 55.000 - 75.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Attractive salary and social benefits

Flexible and hybrid working

Freedom for creative work

Safe and secure workplace

Descripción de la vacante

The Liebherr Group seeks an Application Security Engineer to integrate security into the SDLC, run security testing, and safeguard applications from threats. Based in Madrid with a hybrid model requiring at least 40% on-site, you’ll partner with development teams to remediate and prevent vulnerabilities.

Responsibilities include implementing SAST/DAST/IAST, conducting assessments, automating security tests in CI/CD, and maintaining security documentation.

Formación

• Bachelor’s/Master’s in Cybersecurity, Computer Science, or related field.
• 3+ years in cybersecurity, preferably in Application Security.
• Preferred CISSP, OSCP and cloud certifications (AWS, Azure, or GCP).
• English is a Must, German and French are a plus.
• Understanding of cybersecurity frameworks and standards (ISO 27001, NIST).
• Deep understanding of application security concepts and principles.
• Knowledge of application security tools and techniques (e.g., vulnerability scanners, code analysis tools).
• Expertise in secure coding practices and methodologies.
• Knowledge of OWASP framework, defensible architectures.

Responsabilidades

• Implement security controls and tools for application security testing (SAST, DAST, IAST)
• Perform vulnerability assessments and penetration testing on applications
• Collaborate with developers to remediate security issues and enforce secure coding practices
• Automate security testing within CI/CD pipelines
• Monitor and respond to application security threats and incidents
• Maintain security documentation, policies, and compliance requirements
• Support in the integration of new applications and technologies including secure configuration
• Assist in developing security awareness programs for development teams

Conocimientos

Application security

Secure coding

OWASP

CI/CD security

Vulnerability assessment

Threat monitoring

Documentation

English proficiency

Educación

Bachelor's/Master's in Cybersecurity, Computer Science

Herramientas

Vulnerability scanners

Code analysis tools

Security monitoring tools

Secure configuration management

Descripción del empleo

The Liebherr Group seeks an Application Security Engineer to integrate security into the SDLC, run security testing, and safeguard applications from threats. Based in Madrid with a hybrid model requiring at least 40% on-site, you’ll partner with development teams to remediate and prevent vulnerabilities.

Responsibilities include implementing SAST/DAST/IAST, conducting assessments, automating security tests in CI/CD, and maintaining security documentation.