IT Risk Compliance

Ubique Systems; Gijón; Presencial; EUR 40.000 - 70.000; Jornada completa

Descripción de la vacante

A technology company located in Gijón, Spain is seeking a candidate experienced in software governance and vulnerability management. Responsibilities include assessing security risks in applications, advising teams on best practices, and integrating analysis tools. Ideal candidates will have hands-on software development experience, knowledge of Docker and Kubernetes, and an interest in cybersecurity.

Formación

• Hands-on experience in software development.
• Knowledge of Docker, Kubernetes, and container ecosystems.
• Familiarity with code security analysis tools.

Responsabilidades

• Manage governance and vulnerability in applications.
• Conduct risk assessments during the design phase.
• Advise development teams on secure practices.
• Integrate library analysis tools and code analysis.
• Track vulnerabilities and support their remediation.
• Participate in architecture reviews.

Conocimientos

Software development experience

Docker knowledge

Kubernetes knowledge

Code security analysis

Communication skills

Teamwork

Interest in cybersecurity

Herramientas

Docker

Kubernetes

Code security analysis tools

Descripción del empleo

Responsibilities

• Governance and vulnerability management in applications and containers (Docker, Kubernetes).
• Risk assessment of new applications from the design phase (Threat Modeling).
• Advising and supporting development teams on secure practices.
• Integration of library analysis tools (SCA), static code analysis (SAST), dynamic code analysis (DAST), and container scanning (CSPM, Container Security).
• Tracking and prioritizing detected vulnerabilities and supporting their remediation or flagging them as false positives.
• Participation in architecture reviews and security requirements definition.

Requirements

• Hands‑on experience in software development.
• Knowledge of Docker, Kubernetes, and container ecosystems.
• Experience with code security analysis tools and container scanning.
• Interest in cybersecurity and a willingness to learn about new threats and solutions.
• Excellent communication, teamwork, and results‑oriented skills.
• Desirable: Experience in SDLC processes, security regulations, and cloud environments (AWS, Azure, GCP).
• Experience in banking, fintech, or regulated sectors.