Remote Application Security & Remediation Engineer

Isg International Service Group; Navarra; Presencial; EUR 45.000 - 65.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Fully remote Iberia

Descripción de la vacante

ISG International Service Group Navarra, Spain is seeking a Vulnerability Management Engineer to help determine which reported vulnerabilities are exploitable, explain risks, and guide engineering teams to effective remediation.

You will perform manual testing of web apps and APIs with Burp Suite, assess findings from code and runtime tools, prioritize risks, and integrate security into CI/CD workflows across the software lifecycle.

Formación

• Hands-on experience in application security or vulnerability management.
• Understanding of OWASP risks.
• Ability to communicate with technical and business stakeholders.
• Experience with Python, Java or .NET.
• Knowledge of Azure, Azure DevOps, ServiceNow, dashboards or security frameworks.

Responsabilidades

• Manual testing of web applications and APIs using Burp Suite.
• Analysis of findings from code, dependency and runtime security tools.
• Risk-based prioritisation of vulnerabilities.
• Remediation guidance and follow-up with engineering teams.
• Security integration within CI/CD workflows.
• Application risk reviews and secure-design discussions.
• Reporting on remediation progress, risk trends and outstanding actions.
• Support during urgent or high-impact vulnerability events.

Conocimientos

Burp Suite

OWASP risks

Vulnerability management

Communication with stakeholders

CI/CD security

Herramientas

Azure

Azure DevOps

ServiceNow

Security dashboards

Security frameworks

Descripción del empleo

ISG International Service Group Navarra, Spain is seeking a Vulnerability Management Engineer to help determine which reported vulnerabilities are exploitable, explain risks, and guide engineering teams to effective remediation.

You will perform manual testing of web apps and APIs with Burp Suite, assess findings from code and runtime tools, prioritize risks, and integrate security into CI/CD workflows across the software lifecycle.