Senior AppSec Architect & Security Engineer

Wizeline; Navarra; Presencial; EUR 60.000 - 90.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Competitive compensation

Health benefits & wellness programs

Savings & retirement plans

Global mobility opportunities

Flexible work policy and remote‑friend

WizeAcademy training

Free cloud certifications and coding语言

Descripción de la vacante

Wizeline, a global AI-centric technology solutions provider, seeks an Application Security Specialist to strengthen secure by design across .NET, Java and React apps and APIs. You will lead dynamic and static testing, triage vulnerabilities, and drive remediation with engineering teams.

You will embed SAST/DAST/SCA into GitHub CI/CD pipelines, perform threat modeling per OWASP SAMM, and ensure compliance with PCI-DSS, HIPAA and GDPR in hybrid AWS environments.

Formación

• Proven Penetration Testing, Red Teaming, code review and dynamic analysis experience.
• Deep hands-on with Wiz, Snyk, Qualys, SonarQube and DAST tools.
• Remediate OWASP Top 10 across .NET, Java and React stacks.
• Experience securing CI/CD pipelines and secret management.

Responsabilidades

• Perform dynamic and static testing (SAST/DAST/SCA) on live apps and APIs.
• Prioritize remediation using CVSS and business context; patch code and infrastructure.
• Manage security tooling and integrate into GitHub CI/CD pipelines.
• Conduct threat modeling and architecture reviews per OWASP SAMM.
• Secure hybrid cloud environments (AWS, on-prem) and container workloads.

Conocimientos

Offensive & Defensive AppSec

AppSec Tooling Mastery

Code & Infrastructure Remediation

DevSecOps & Secret Management

Security Frameworks

Cloud & Hybrid Infrastructure

Herramientas

Wiz

Snyk

Qualys

SonarQube

Burp Suite Pro

OWASP ZAP

GitHub Actions

AWS KMS

HashiCorp Vault

IAM Roles

Descripción del empleo

Wizeline, a global AI-centric technology solutions provider, seeks an Application Security Specialist to strengthen secure by design across .NET, Java and React apps and APIs. You will lead dynamic and static testing, triage vulnerabilities, and drive remediation with engineering teams.

You will embed SAST/DAST/SCA into GitHub CI/CD pipelines, perform threat modeling per OWASP SAMM, and ensure compliance with PCI-DSS, HIPAA and GDPR in hybrid AWS environments.