Vulnerability Management Engineer

Mindmatch; Valencia; Presencial; EUR 45.000 - 65.000; Jornada completa

Descripción de la vacante

MindMatch busca un Ingeniero de Gestión de Vulnerabilidades para un puesto permanente dentro de un programa internacional de tecnología en Valencia. No se trata solo de ejecutar herramientas; se investigarán hallazgos, se eliminarán falsos positivos y se trabajará con equipos de desarrollo hasta resolver y volver a verificar.

Se valora experiencia práctica en seguridad de aplicaciones, conocimiento de OWASP y capacidad para comunicar con stakeholders técnicos y de negocio.

Formación

• Experiencia práctica en seguridad de aplicaciones o gestión de vulnerabilidades.
• Conocimiento de riesgos OWASP.
• Capacidad de comunicar con stakeholders técnicos y de negocio.
• Experiencia con lenguajes de scripting o desarrollo como Python, Java o .NET.
• Conocimiento de Azure, Azure DevOps, ServiceNow, paneles de seguridad o marcos de seguridad.

Responsabilidades

• Pruebas manuales de aplicaciones web y APIs con Burp Suite.
• Análisis de hallazgos de herramientas de seguridad de código, dependencias y runtime.
• Priorización de vulnerabilidades por riesgo.
• Guía de remediación y seguimiento con equipos de desarrollo.
• Integra la seguridad en flujos CI/CD.
• Revisiones de riesgo de la aplicación y discusiones de diseño seguro.
• Informes de progreso de remediación, tendencias de riesgo y acciones pendientes.
• Asistencia durante incidentes de vulnerabilidad de alto impacto.

Conocimientos

Vulnerability management

Application security

OWASP risks

Communication skills

Python

Java

C#/.NET

Azure

Azure DevOps

ServiceNow

Security dashboards

Security frameworks

Herramientas

Burp Suite

Azure DevOps

ServiceNow

CI/CD tooling

Descripción del empleo

Vulnerability Management Engineer MindMatch•Valencia, comunidad valenciana, Spain

Descripción del trabajo

Do you enjoy investigating whether a reported vulnerability is genuinely exploitable, explaining why it matters and helping engineering teams fix it properly?

We are recruiting an Application Security & Remediation Engineer for a permanent position within a long-term international technology programme.

This is not a role focused solely on running scanning tools. You will examine findings, remove false positives, assess real-world risk and work with development teams until the underlying issue has been resolved and successfully retested.

La siguiente información tiene como objetivo proporcionar a los posibles candidatos una mejor comprensión de los requisitos para este puesto.

What you will work on

• Manual testing of web applications and APIs using Burp Suite.
• Analysis of findings produced by code, dependency and runtime security tools.
• Risk-based prioritisation of vulnerabilities.
• Remediation guidance and follow-up with engineering teams.
• Security integration within CI/CD workflows.
• Application risk reviews and secure-design discussions.
• Reporting on remediation progress, risk trends and outstanding actions.
• Support during urgent or high-impact vulnerability events.

What we are looking for

You should bring solid hands-on experience in application security or vulnerability management, a good understanding of OWASP risks and the ability to communicate clearly with both technical and business stakeholders.

Experience with scripting or development languages such as Python, Java or .NET will be valuable. Knowledge of Azure, Azure DevOps, ServiceNow, security dashboards or recognised security frameworks would be an additional advantage.

There is flexibility regarding years of experience. A professional with around three or four years of directly relevant experience may be considered where the technical capability, autonomy and stakeholder skills are strong. xkdbapo

Practical information

• Fully remote Iberia
• Permanent employment contract
• Fluent professional English required
• Spanish is advantageous, but not mandatory
• Applicants must be able to work in Spain without employer sponsorship

This opportunity may be particularly attractive to someone who wants to move beyond identifying problems and play an active role in improving the way application-security risk is managed across the software lifecycle.

#ApplicationSecurity #AppSec #CyberSecurityJobs #VulnerabilityManagement #RemoteJobsSpain #RemoteJobsPortugal