Remote Senior AppSec Engineer – Secure by Design

Job&Talent; Madrid; Presencial; EUR 60.000 - 90.000; Jornada completa

Descripción de la vacante

Job&Talent is seeking a Senior Application Security Engineer to drive security by design across the SDLC, including threat modelling, secure code reviews, security automation, and developer enablement. The role collaborates with Engineering and Product teams to scale secure products while enabling fast delivery.

This fully remote position offers CET-friendly hours and exposure to a global set of stakeholders, with opportunities to mentor teams and shape the AppSec program across the organisation.

Formación

• 3–4 years of experience in Information Security, including at least 2 years in Application Security.
• Strong experience with Secure SDLC, threat modelling, application security reviews and secure code reviews.
• Hands-on experience with SAST, SCA and automated security testing integrated into CI/CD pipelines.
• Strong knowledge of OWASP Top 10, OWASP ASVS, API Security and secure coding best practices.
• Experience implementing and managing WAF solutions, as well as conducting internal penetration testing (including APIs using Burp Suite).
• Solid understanding of Kubernetes security, cloud-native applications and networking fundamentals (HTTP, HTTPS, TCP/IP).
• Basic scripting or development experience, preferably in Python.
• Excellent communication skills, with the ability to influence engineering teams and explain complex security concepts to technical and non-technical stakeholders.

Responsabilidades

• Act as the Application Security Subject Matter Expert (SME), partnering with Engineering and Product teams to embed security throughout the SDLC.
• Lead application security reviews, threat modelling, code reviews and penetration testing to identify and mitigate security risks.
• Design, implement and automate security controls across CI/CD pipelines, including SAST, SCA and other AppSec tooling.
• Drive the technical roadmap of the Application Security program, improving secure development practices and scaling security initiatives across the organisation.
• Improve and manage application security controls, including WAF, Kubernetes security and vulnerability management.
• Mentor Security Champions and junior engineers, promoting a strong security culture across development teams.
• Define and communicate meaningful Application Security metrics to measure risk reduction and program effectiveness.

Conocimientos

Threat modelling

Secure code reviews

CI/CD security

SAST

SCA

OWASP Top 10

OWASP ASVS

API Security

WAF

Kubernetes security

Python

Burp Suite

Herramientas

Burp Suite

Descripción del empleo

Job&Talent is seeking a Senior Application Security Engineer to drive security by design across the SDLC, including threat modelling, secure code reviews, security automation, and developer enablement. The role collaborates with Engineering and Product teams to scale secure products while enabling fast delivery.

This fully remote position offers CET-friendly hours and exposure to a global set of stakeholders, with opportunities to mentor teams and shape the AppSec program across the organisation.