Senior AppSec Engineer - Remote, Flexible Hours, Bonus

Tecnosylva; León; Presencial; EUR 90.000 - 130.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Competitive salary

Private health insurance

Annual bonus

Flexible working hours

Remote work options

Descripción de la vacante

Technosylva in Spain is seeking a highly experienced Senior Application Security Engineer to elevate our AppSec program across a modern cloud-native software environment. This role blends hands-on security work with strategy, governance, and cross‑functional leadership.

You will partner with Engineering, Product, Platform, and Security leadership to transform AppSec into a measurable business capability, define secure SDLC processes, and drive secure coding, threat modeling, and security reviews.

Formación

• Minimum 10 years in AppSec/S-SDLC or related security engineering.
• Proven track record leading AppSec programs in modern SDLC, cloud-native environments.
• Hands-on DevSecOps experience with CI/CD security, SAST/DAST, SCA, secrets management, and IaC (Terraform).
• Strong communication, leadership, and ability to influence across tech and non-technical stakeholders.

Responsabilidades

• Lead the evolution of the AppSec program and roadmaps across engineering teams.
• Establish secure-by-design practices and secure coding standards.
• Build AppSec KPIs and reporting for leadership.
• Improve and optimize GitLab/GitHub security capabilities and integrations.
• Embed security into CI/CD pipelines with risk-based gates and reduced friction.
• Remediate vulnerabilities with engineers and conduct code reviews.
• Mature vulnerability management with triage, prioritization, SLAs, and reporting.
• Own AppSec initiatives from planning to execution with cross-functional teams.
• Improve security culture with coaching, workshops, and mentoring.

Descripción del empleo

Technosylva in Spain is seeking a highly experienced Senior Application Security Engineer to elevate our AppSec program across a modern cloud-native software environment. This role blends hands-on security work with strategy, governance, and cross‑functional leadership.

You will partner with Engineering, Product, Platform, and Security leadership to transform AppSec into a measurable business capability, define secure SDLC processes, and drive secure coding, threat modeling, and security reviews.