Security Architect: DevSecOps & Application Security

Colt Technology Services; Barcelona; Hybrid; EUR 70,000 - 110,000; Full time

Benefits offered by this job

Flexible working hours

Option to work from home

Induction program

Opportunities for development

Global Family Leave Policy

Employee Assistance Program

Inclusion & diversity networks

Job summary

Colt Technology Services is seeking a Security Architect specializing in Application Security and DevSecOps to join our Security and Resilience – Security Architecture team. You will act as a subject matter expert for secure software development and ensure applications are secure by design and by default.

You will work with Engineering, DevOps, Cloud, SOC and Risk teams to embed security across the SDLC, guiding secure coding practices, CI/CD integration, and security testing efforts.

Qualifications

• 5+ years in information security with focus on application security and DevSecOps.
• Knowledge of OWASP Top 10 and secure software development practices.
• Hands-on experience with DevSecOps tooling in CI/CD environments (GitLab).
• Experience with application security testing tools and practices: SAST, DAST, SCA and secrets/credentials scanning.
• Experience contributing to security design reviews and in penetration testing activities.
• Strong understanding of modern application architectures (APIs, microservices, cloud-native).
• Knowledge of authentication and session management concepts in applications.
• Ability to translate technical vulnerabilities into business risk and remediation actions.
• Strong collaboration and communication with engineering teams.

Responsibilities

• Provide security architecture expertise for application security and DevSecOps across the software development lifecycle.
• Contribute to the target architecture for secure software development aligned to Secure by Design principles.
• Support integration of security controls into CI/CD pipelines (GitLab) with automated testing and policy enforcement.
• Design and implement application security controls (SAST, DAST, SCA, Secrets scanning).
• Work with engineering teams to ensure secure coding practices and DevSecOps adoption.
• Support security architecture reviews and assurance activities for internal apps and services.
• Identify and reduce risks related to vulnerabilities and insecure coding practices.
• Coordinate third-party penetration testing of internet-facing applications and track remediation.

Skills

Application security

DevSecOps

Security architecture

Secure coding practices

Communication

Collaboration with engineering

Tools

GitLab

SAST

DAST

SCA / dependency scanning

Secrets scanning

Job description

Colt Technology Services is seeking a Security Architect specializing in Application Security and DevSecOps to join our Security and Resilience – Security Architecture team. You will act as a subject matter expert for secure software development and ensure applications are secure by design and by default.

You will work with Engineering, DevOps, Cloud, SOC and Risk teams to embed security across the SDLC, guiding secure coding practices, CI/CD integration, and security testing efforts.