Senior AppSec Architect — Cloud, DevSecOps & Threat Modeling

Wizeline; Valencia; Híbrido; EUR 90.000 - 130.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Health benefits

Retirement plans

Global mobility opportunities

Flexible work policy

WizeAcademy learning

Cloud certifications

Descripción de la vacante

Wizeline is seeking a Security Architect / Senior Security Engineer to lead application security across web and API platforms, combining hands-on testing, remediation, threat modelling, and secure design reviews in a hybrid cloud environment to protect critical products and customers.

You will manage Wiz, Snyk, Qualys, and other tooling, embed SAST/DAST checks into GitHub Actions, perform threat modelling per OWASP SAMM, ensure compliance with GDPR/PCI-DSS, and secure AWS and on‑prem

Formación

• Penetration testing, red teaming, and manual code review experience.
• Deep hands-on with SAST/DAST/SCA tooling (Wiz, Snyk, Qualys, SonarQube).
• Experience remediating OWASP Top 10 across .NET, Java, and React stacks.
• CI/CD security integration and secret management (GitHub Actions, AWS KMS, Vault).
• Familiarity with OWASP Top 10, SAMM, SBOM management.
• Cloud and hybrid infra security in AWS environments.

Responsabilidades

• Perform dynamic and static application security testing on live applications and APIs.
• Prioritize remediation with CVSS, exploitability, and business context; patch code and infrastructure.
• Manage scanning tools (Wiz, Snyk, Qualys, SonarQube, Burp Suite, ZAP).
• Embed SAST/DAST checks into GitHub CI/CD pipelines for shift-left security.
• Conduct threat modeling and architecture reviews per OWASP SAMM.
• Secure hybrid and cloud environments across AWS and on‑prem.

Conocimientos

Offensive Security

Defensive AppSec

AppSec Tooling

Code & Infra Remediation

DevSecOps

Threat Modeling

SBOM Management

AWS Security

Cloud/Hybrid Security

Herramientas

Wiz

Snyk

Qualys

SonarQube

Burp Suite Pro

OWASP ZAP

Descripción del empleo

Wizeline is seeking a Security Architect / Senior Security Engineer to lead application security across web and API platforms, combining hands-on testing, remediation, threat modelling, and secure design reviews in a hybrid cloud environment to protect critical products and customers.

You will manage Wiz, Snyk, Qualys, and other tooling, embed SAST/DAST checks into GitHub Actions, perform threat modelling per OWASP SAMM, ensure compliance with GDPR/PCI-DSS, and secure AWS and on‑prem