Vulnerability & DevSecOps Automation Specialist

Neotalent Conclusion; Barcelona; Híbrido; EUR 60 000 - 90 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Meal vouchers

Transportation allowance

Training and certifications

Private health insurance

Childcare support

Resumo da oferta

Neotalent Conclusion is seeking a Vulnerability Management Specialist to join our teams and work with a leading international insurance company in Barcelona. You will monitor and remediate vulnerabilities across dependencies and containers, collaborating with Development, DevOps, and Security teams.

The role requires 3+ years in software security, hands-on with SAST/DAST/SCA tools, OpenShift and Docker, and a solid understanding of OWASP Top 10, CVSS, and CWE.

Qualificações

• Bachelor's degree in CS, cybersecurity, software engineering, IT, or related field.
• 3+ years in software security, vulnerability management, or similar.
• Hands-on with SAST, DAST, and SCA tools.
• Experience with SonarQube, Checkmarx, OWASP ZAP, Dependabot.
• Experience managing dependencies across npm, Maven, pip, NuGet, Go modules.
• CI/CD security process automation.
• Scripting in Python or Bash.
• OpenShift and Docker experience.
• Knowledge of OWASP Top 10, CWE, CVSS.
• Git, GitHub and Jira experience.
• DevSecOps in cloud environments.
• High level of English.
• Hybrid work in Barcelona.

Responsabilidades

• Monitor, triage, assess, and prioritize vulnerabilities in dependencies, libraries, and frameworks.
• Analyze security findings from SAST, DAST, and SCA tools such as SonarQube, Checkmarx, OWASP ZAP, and Dependabot.
• Automate dependency update, vulnerability detection, and remediation workflows within CI/CD pipelines.
• Collaborate with Development, DevOps, and Security teams to embed security in SDLC.
• Manage security initiatives within OpenShift and Docker environments.
• Document vulnerability assessments, remediation activities, and compliance evidence using Jira.
• Develop and enforce secure coding standards and dependency management guidelines.
• Prepare reports on vulnerability status, remediation progress, and risk trends for stakeholders.
• Support incident response activities for critical vulnerabilities and high-severity CVEs.
• Ensure compliance with ISO 27001, NIST, GDPR, and SOC 2.

Conhecimentos

Vulnerability Management

SAST

DAST

SCA

OpenShift

Docker

Python

Bash

OWASP Top10

Git

Jira

DevSecOps

Cloud security

English

Formação académica

Bachelor's degree in Computer Science or related field

Ferramentas

SonarQube

Checkmarx

OWASP ZAP

Dependabot

Tenable

Qualys

Rapid7

GitHub

Descrição da oferta de emprego

Neotalent Conclusion is seeking a Vulnerability Management Specialist to join our teams and work with a leading international insurance company in Barcelona. You will monitor and remediate vulnerabilities across dependencies and containers, collaborating with Development, DevOps, and Security teams.

The role requires 3+ years in software security, hands-on with SAST/DAST/SCA tools, OpenShift and Docker, and a solid understanding of OWASP Top 10, CVSS, and CWE.