Security Engineer: Offensive AppSec & Cloud Hardening

Doist; Barcelona; Híbrido; EUR 90.000 - 130.000; Jornada completa

Descripción de la vacante

Wizeline, a global AI-native technology solutions provider, is seeking an experienced AppSec professional to join our Barcelona team. You will perform hands-on testing, remediation, and tooling management across multi-stack applications in cloud and on-prem environments.

You will embed security into CI/CD pipelines using GitHub Actions, conduct threat modeling, and align with OWASP SAMM standards to meet PCI-DSS, HIPAA, or GDPR as applicable.

Formación

• Proven expertise in penetration testing, red teaming, and manual code reviews.
• Experience configuring enterprise security scanners like Wiz, Snyk, Qualys, Burp Suite, OWASP ZAP.
• Ability to remediate vulnerabilities in .NET, Java, and React apps.
• Experience embedding security into CI/CD pipelines (GitHub Actions).
• Knowledge of OWASP SAMM, OWASP Top 10, and SBOM tracking.

Responsabilidades

• Perform dynamic and static AppSec testing across applications and APIs.
• Prioritize risks with CVSS and implement patches in live environments.
• Manage AppSec tooling to minimize noise and surface findings.
• Embed SAST/DAST and secret management into GitHub Actions pipelines.
• Conduct architecture reviews and threat modeling per OWASP SAMM.
• Secure hybrid AWS/cloud and on-prem infrastructure.

Conocimientos

Penetration testing

Red teaming

Code reviews

SAST/DAST tooling

Threat modeling

OWASP Top10

SBOM tracking

GitHub Actions

Cloud security (AWS)

Security auditing

Herramientas

Wiz

Snyk

Qualys

Burp Suite

OWASP ZAP

SonarQube

Descripción del empleo

Wizeline, a global AI-native technology solutions provider, is seeking an experienced AppSec professional to join our Barcelona team. You will perform hands-on testing, remediation, and tooling management across multi-stack applications in cloud and on-prem environments.

You will embed security into CI/CD pipelines using GitHub Actions, conduct threat modeling, and align with OWASP SAMM standards to meet PCI-DSS, HIPAA, or GDPR as applicable.