Vulnerability Management Engineer

Isg International Service Group; Cillorigo de Liébana; Presencial; EUR 55.000 - 75.000; Jornada completa

Descripción de la vacante

Isg International Service Group busca un Ingeniero de Seguridad de Aplicaciones para evaluar vulnerabilidades, guiar la remediación y asegurar que las fallas se resuelvan y retesteen con los equipos de desarrollo.

Se requiere experiencia práctica en seguridad de aplicaciones o gestión de vulnerabilidades, conocimiento OWASP y capacidad para comunicar riesgos a interlocutores técnicos y de negocio; se valora Python, Java o .NET y experiencia con Azure DevOps, ServiceNow o marcos de seguridad.

Formación

• Experiencia práctica en seguridad de aplicaciones o gestión de vulnerabilidades.
• Conocimiento sólido de OWASP y capacidad para comunicar riesgos a interesados técnicos y de negocio.
• Valorable experiencia en Python, Java o .NET y conocimiento de herramientas/marcos de seguridad como Azure DevOps o ServiceNow.

Responsabilidades

• Pruebas manuales de aplicaciones web y APIs para identificar vulnerabilidades.
• Análisis de hallazgos de herramientas de seguridad y código.
• Priorización de vulnerabilidades basada en el riesgo.
• Guía de remediación y seguimiento con equipos de ingeniería.
• Integración de seguridad en flujos CI/CD.
• Revisiones de riesgo de aplicaciones y diseño seguro.
• Informe de progreso de remediación y tendencias de riesgo.

Conocimientos

Application Security

Vulnerability Management

Stakeholder Communication

Burp Suite

Herramientas

Burp Suite

Descripción del empleo

Descripción del trabajo

Do you enjoy investigating whether a reported vulnerability is genuinely exploitable, explaining why it matters and helping engineering teams fix it properly?

We are recruiting an Application Security & Remediation Engineer for a permanent position within a long-term international technology programme.

This is not a role focused solely on running scanning tools. You will examine findings, remove false positives, assess real-world risk and work with development teams until the underlying issue has been resolved and successfully retested.

Aunque la experiencia profesional y las cualificaciones son clave para este puesto, asegúrese de comprobar si posee las habilidades interpersonales preferibles antes de solicitar, si se requieren.

What you will work on

• Manual testing of web applications and APIs using Burp Suite.
• Analysis of findings produced by code, dependency and runtime security tools.
• Risk-based prioritisation of vulnerabilities.
• Remediation guidance and follow-up with engineering teams.
• Security integration within CI/CD workflows.
• Application risk reviews and secure-design discussions.
• Reporting on remediation progress, risk trends and outstanding actions.
• Support during urgent or high-impact vulnerability events.

What we are looking for

You should bring solid hands-on experience in application security or vulnerability management, a good understanding of OWASP risks and the ability to communicate clearly with both technical and business stakeholders.

Experience with scripting or development languages such as Python, Java or .NET will be valuable. Knowledge of Azure, Azure DevOps, ServiceNow, security dashboards or recognised security frameworks would be an additional advantage.

There is flexibility regarding years of experience. A professional with around three or four years of directly relevant experience may be considered where the technical capability, autonomy and stakeholder skills are strong. xkdbapo

Practical information

• Fully remote Iberia
• Permanent employment contract
• Fluent professional English required
• Spanish is advantageous, but not mandatory
• Applicants must be able to work in Spain without employer sponsorship

This opportunity may be particularly attractive to someone who wants to move beyond identifying problems and play an active role in improving the way application-security risk is managed across the software lifecycle.

#ApplicationSecurity #AppSec #CyberSecurityJobs #VulnerabilityManagement #RemoteJobsSpain #RemoteJobsPortugal

Crear una alerta de empleo para esta búsqueda