Senior Vulnerability Management Engineer (Barcelona)

SQUAD Conseil et Expertises; Cataluña; Presencial; EUR 90.000 - 130.000; Jornada completa

Descripción de la vacante

SQUAD Group in Barcelona seeks a Senior Security Engineer focused on vulnerability management. You will design, build, and operate end-to-end systems that surface risk and drive remediation at scale across complex environments.

You will lead automation, CI/CD integrations, and cloud security practices while mentoring engineers and coordinating with incident response and product teams. OSCP/GPEN/GWAPT or equivalent hands-on credentials preferred.

Formación

• 4–6 years of experience in security engineering, vulnerability management, or closely related infrastructure security roles.
• Deep knowledge of vulnerability scanning workflows, CVSS/risk scoring, and remediation pipeline design.
• Strong hands-on skills in automation and secure integration: Python, APIs, CI/CD orchestration, and cloud IAM patterns.
• Solid understanding of cloud security across major public cloud environments (AWS, GCP, or Azure).
• Familiarity with threat modelling methodologies and penetration testing techniques.
• Experience driving technical alignment across multiple teams without direct authority.

Responsabilidades

• Design and operate end-to-end vulnerability management systems: asset inventories, ingestion pipelines, triage workflows, and remediation tracking.
• Build complex automation and integrations across the vulnerability ecosystem, APIs, service-account patterns, canonical data schemas, and CI/CD pipelines.
• Conduct internal penetration tests and technical assessments to validate controls and drive root-cause remediations.
• Lead threat modelling, countermeasure validation, and technical reviews for high-impact vulnerabilities.
• Author and maintain runbooks, SLAs, and observability dashboards for operational reliability.
• Mentor and coach engineers through design reviews, code reviews, and shared platform patterns.
• Evaluate vendors and tooling: define criteria, run proof-of-concepts, and deliver technical procurement recommendations.
• Act as a technical partner to Cloud, Incident Response, and product engineering teams.

Conocimientos

Vulnerability management

Automation & CI/CD

Cloud security

Python scripting

Threat modelling

Cross-team alignment

Herramientas

Python

APIs

CI/CD orchestration

Cloud IAM

Descripción del empleo

SQUAD Group in Barcelona seeks a Senior Security Engineer focused on vulnerability management. You will design, build, and operate end-to-end systems that surface risk and drive remediation at scale across complex environments.

You will lead automation, CI/CD integrations, and cloud security practices while mentoring engineers and coordinating with incident response and product teams. OSCP/GPEN/GWAPT or equivalent hands-on credentials preferred.