Remote AppSec Engineer - SaaS Security & Bug Bounty

Contentsquare; Barcelona; Híbrido; EUR 65.000 - 95.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Stock options

Hybrid/Remote work policy

Career development

Hackathons

Lifestyle allowance

Descripción de la vacante

Contentsquare is seeking an Application Security Engineer (AppSec) to join the Barcelona office and collaborate with development, product, and external groups to protect our SaaS products. You will conduct automated security audits, lead threat modeling, and perform deep security reviews to minimize vulnerabilities.

You’ll architect vulnerability workflows, drive AI-enabled security processes in CI/CD, and mentor teams on secure coding practices while engaging with bug bounty activities and

Formación

• 3+ years of professional experience in Application Security Operations within a high-growth SaaS or cloud-native environment.
• Advanced proficiency in securing modern technical stacks, with specific expertise in NestJS, Vue.js, and Angular frameworks.
• Hands-on experience with enterprise security tooling, including Snyk, Datadog ASM/AppSec (WAF), Google SecOps, and Crowdstrike.
• Deep architectural understanding of AWS and Azure environments, including Kubernetes/Docker container security and Infrastructure as Code (Terraform).
• Demonstrated ability to apply AI and LLM technologies to automate security tasks, such as automated vulnerability validation or code analysis at scale.
• Expertise in scripting and development (Python, Node.js, Shell) to build custom security tooling and integrations.
• Comprehensive knowledge of web protocols, OWASP Top10, and advanced threat frameworks (MITRE ATT&CK, NIST CSF).
• Proven track record in ethical hacking, CTF competitions, or bug bounty hunting, showcasing a high level of technical tenacity and analytical rigor.
• Exceptional cross-functional collaboration skills, with the ability to articulate complex security risks to both technical and non-technical stakeholders.
• Fluency in English is mandatory.

Responsabilidades

• Conduct continuous, automated security audits of our global SaaS applications.
• Serve as a strategic security consultant to product and engineering teams during design phases.
• Perform security-focused code reviews and mentor developers on secure coding patterns.
• Architect and manage the end-to-end vulnerability lifecycle across cloud and app layers.
• Orchestrate AI-driven security workflows to discover and validate vulnerabilities in CI/CD pipelines.
• Lead Shift-Left initiatives by integrating security checkpoints into automation stacks.
• Oversee private and public bug-bounty programs with researchers and internal teams.
• Coordinate external penetration testing engagements and security assessments for customers.
• Drive incident response with root-cause analysis to prevent recurrence.

Conocimientos

AppSec operations

Threat modeling

Secure code reviews

Automation tooling

AI/LLM in security

Python scripting

AWS/Azure security

Kubernetes security

English fluency

Bug bounty experience

Herramientas

Snyk

Datadog ASM

Google SecOps

CrowdStrike

Terraform

AWS security tooling

Kubernetes

Descripción del empleo

Contentsquare is seeking an Application Security Engineer (AppSec) to join the Barcelona office and collaborate with development, product, and external groups to protect our SaaS products. You will conduct automated security audits, lead threat modeling, and perform deep security reviews to minimize vulnerabilities.

You’ll architect vulnerability workflows, drive AI-enabled security processes in CI/CD, and mentor teams on secure coding practices while engaging with bug bounty activities and