Remote Senior AppSec Engineer – SDLC Champion

Jobandtalent; Madrid; A distancia; EUR 75.000 - 120.000; Jornada completa

Descripción de la vacante

Job&Talent is a world-leading, AI-powered workforce platform. We seek a Senior Application Security Engineer to drive security by design across the SDLC and lead threat modelling, secure code reviews, and security automation.

In this fully remote role (flexible within ±1 hour of CET), you will partner with Engineering and Product, mentor champions, and shape the security roadmap for scalable, secure products used by global clients.

Formación

• 3–4 years of information security, incl. ≥2 years in Application Security.
• Experience with Secure SDLC, threat modelling, security reviews and secure code reviews.
• Hands-on experience with SAST, SCA, and automated security testing in CI/CD pipelines.
• Strong knowledge of OWASP Top 10, ASVS, API Security and secure coding best practices.
• Experience implementing and managing WAF solutions and conducting internal pentesting (APIs using Burp Suite).
• Understanding of Kubernetes security, cloud-native apps and networking fundamentals (HTTP/HTTPS/TCP/IP).
• Basic scripting or development experience, preferably Python.
• Excellent communication skills to influence engineering teams.

Responsabilidades

• Act as the Application Security SME, partnering with Engineering and Product to embed security across the SDLC.
• Lead application security reviews, threat modelling, code reviews and penetration testing.
• Design, implement and automate security controls across CI/CD pipelines (SAST, SCA and tooling).
• Drive the technical roadmap of the Application Security program and scale initiatives.
• Improve and manage security controls including WAF, Kubernetes security and vulnerability management.
• Mentor Security Champions and junior engineers, promoting a security culture.
• Define and communicate meaningful AppSec metrics to measure risk reduction.

Conocimientos

Threat modelling

Secure SDLC

SAST

SCA

OWASP Top 10

WAF

Kubernetes security

Python scripting

API security

Communication

Herramientas

Burp Suite

CI/CD tooling

Descripción del empleo

Job&Talent is a world-leading, AI-powered workforce platform. We seek a Senior Application Security Engineer to drive security by design across the SDLC and lead threat modelling, secure code reviews, and security automation.

In this fully remote role (flexible within ±1 hour of CET), you will partner with Engineering and Product, mentor champions, and shape the security roadmap for scalable, secure products used by global clients.