Security Architect / Senior AppSec Engineer - Remote-Ready

Wizeline; España; Híbrido; EUR 70.000 - 110.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Health benefits

Retirement plans

Global mobility

Remote-friendly policy

Happy hours & activities

Learning programs (WizeAcademy)

Free certifications in cloud tech &编语言

Descripción de la vacante

Wizeline is seeking an experienced Application Security professional to lead offensive and defensive AppSec efforts across live applications and APIs. You will implement secure SDLC practices, manage security tooling, and remediate vulnerabilities in multi‑stack environments.

In this role, you’ll engineer DevSecOps controls, conduct threat modeling, and ensure compliance with GDPR, PCI-DSS, and HIPAA, while securing hybrid AWS and on‑prem infrastructure.

Formación

• Proven experience in Penetration Testing, Red Teaming, and manual code review.

Responsabilidades

• Application Security & Offensive Testing across live applications and APIs.
• Vulnerability remediation and triage with risk-based prioritization.
• AppSec tooling management for Wiz, Snyk, Qualys, SonarQube, and DAST tools.
• DevSecOps & pipeline integration into GitHub CI/CD pipelines.
• Governance and architecture reviews based on OWASP SAMM and regulatory standards (PCI-DSS, HIPAA, GDPR).
• Hybrid & cloud security for AWS, containers, and on‑premise infrastructure.

Conocimientos

Offensive AppSec

AppSec Tooling

Code Remediation

DevSecOps

Security Frameworks

Cloud Security

Herramientas

Wiz

Snyk

Qualys

SonarQube

Burp Suite

OWASP ZAP

Descripción del empleo

Wizeline is seeking an experienced Application Security professional to lead offensive and defensive AppSec efforts across live applications and APIs. You will implement secure SDLC practices, manage security tooling, and remediate vulnerabilities in multi‑stack environments.

In this role, you’ll engineer DevSecOps controls, conduct threat modeling, and ensure compliance with GDPR, PCI-DSS, and HIPAA, while securing hybrid AWS and on‑prem infrastructure.