Senior AppSec Engineer: Remote & Cloud SDLC Security

Technosylva; España; Presencial; EUR 90.000 - 140.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Remote work options

Competitive annual salary

Private health insurance

Annual bonus

Flexible benefits plan

Descripción de la vacante

Technosylva seeks a Senior Application Security Engineer to elevate our AppSec program across a cloud-native software environment. You will drive secure SDLC processes, champion secure coding standards, and partner with Engineering, Product, Platform, and Security leadership.

In this role you will define metrics and risk-based gates, integrate security into CI/CD, mentor engineers, and transform AppSec from tooling to a strategic, measurable security capability across the organization.

Formación

• Minimum 10 years of experience in AppSec or related field.
• Proven track record driving AppSec programs in medium/large orgs.
• Strong technical expertise in OWASP Top 10, API security, threat modeling, and security reviews.
• Hands-on DevSecOps: CI/CD security, SAST/DAST, SCA, secrets management, container/Kubernetes security, IaC (Terraform preferred).
• Strong understanding of software engineering practices and ability to read production-grade code.
• Strong business and operational capabilities: project management, executive reporting, risk prioritization.

Responsabilidades

• Lead the evolution of AppSec program and roadmap across engineering teams.
• Establish secure-by-design practices integrated into development workflows.
• Build AppSec KPIs and executive reporting.
• Improve GitLab/GitHub security capabilities and integrations.

Conocimientos

Strong communication

Executive reporting

Ownership/autonomy

Problem solving

Herramientas

Terraform

GitLab security

GitHub security

Descripción del empleo

Technosylva seeks a Senior Application Security Engineer to elevate our AppSec program across a cloud-native software environment. You will drive secure SDLC processes, champion secure coding standards, and partner with Engineering, Product, Platform, and Security leadership.

In this role you will define metrics and risk-based gates, integrate security into CI/CD, mentor engineers, and transform AppSec from tooling to a strategic, measurable security capability across the organization.