Senior App Security Engineer: CI/CD & Secure Coding

Axpo group; Madrid; Hybrid; EUR 60,000 - 90,000; Full time

Benefits offered by this job

Flexible working hours

Meal allowances

Internet compensation

Training courses

Gym coverage

Health insurance

Job summary

Axpo Group's Application Security team is seeking a seasoned security professional to embed security into development and protect our trading, market intelligence, and quantitative platforms.

You will operate SAST/DAST/SCA tools within CI/CD pipelines (Azure DevOps, GitHub Actions, Jenkins) and guide developers with practical secure coding practices across .NET, Python, Angular, and React.

Qualifications

• 5+ years of experience in application security, software development, DevSecOps, or related technical role.
• Hands‑on experience integrating security tools into CI/CD environments and operating SAST, DAST, or SCA tools.
• Ability to read and understand code in languages such as .NET, Python, Angular, or React.
• A pragmatic, self‑starter mindset with strong analytical and communication skills, able to explain security topics to non‑security audiences.
• A bachelor's degree in Computer Science, Information Security, Software Engineering, Data Engineering, or a related field.
• Ideally, certifications such as OSCP, eWPT, Burp Suite Certified Practitioner, or DevSecOps credentials, and familiarity with cloud‑native and regulated environments.

Responsibilities

• Operate application security tools (SAST, DAST, SCA) and ensure scans run correctly within CI/CD pipelines such as Azure DevOps, GitHub Actions, or Jenkins.
• Triage vulnerabilities, filter false positives, and guide development teams through remediation with practical, secure coding advice.
• Support secure development across .NET, Angular, React, and Python‑based applications and scripts.
• Identify security risks in APIs, data pipelines, and model‑driven solutions, and support reviews of access control and data integrity.
• Support secure management of open‑source dependencies, secrets, API keys, and credentials used in automated workflows.
• Deliver practical security awareness and training to development, quantitative, and data engineering teams.

Skills

AppSec experience

CI/CD security

Code reading

Security communication

Bachelor's in CS/InfoSec

Education

Bachelor's degree in Computer Science/Info Security/Software Engineering

Tools

SAST

DAST

SCA

Azure DevOps

GitHub Actions

Jenkins

Job description

Axpo Group's Application Security team is seeking a seasoned security professional to embed security into development and protect our trading, market intelligence, and quantitative platforms.

You will operate SAST/DAST/SCA tools within CI/CD pipelines (Azure DevOps, GitHub Actions, Jenkins) and guide developers with practical secure coding practices across .NET, Python, Angular, and React.