Vulnerability Management Security Engineer

Huxley; Barcelona; Hybrid; EUR 90,000 - 120,000; Part time

Job summary

Huxley is seeking an experienced Vulnerability Management Security Engineer to join a cybersecurity team focused on vulnerability management, penetration testing, and security automation within a complex international environment. The selected candidate will identify, assess, and remediate security vulnerabilities and help improve security processes and automation capabilities.

This freelance role based in Barcelona offers hybrid work with strong English, hands-on security expertise, and

Qualifications

• 5–8 years of experience as a Security Engineer.
• 3–4 years of penetration testing experience.
• Alternatively, 3–4 years of combined Security Engineering and Penetration Testing experience.
• Hands-on experience with penetration testing tools.
• 3–4 years of experience in Vulnerability Management.
• Experience automating security processes and workflows.
• Experience in Threat Intelligence and Incident Response.
• Fluent English (mandatory).
• Strong teamwork and communication skills.

Responsibilities

• Conduct internal penetration testing activities across different environments.
• Manage vulnerability assessments and remediation processes.
• Identify, analyze, prioritize, and propose mitigation plans for security vulnerabilities.
• Support security engineering initiatives across multiple domains.
• Develop and implement automation solutions to improve security operations.
• Contribute to threat intelligence activities and incident response processes.
• Collaborate with technical and business stakeholders to improve overall security posture.
• Support continuous improvement initiatives within the Vulnerability Management program.

Skills

Penetration testing

Vulnerability management

Automation

Threat intelligence

Incident response

English language proficiency

Tools

Penetration testing tools

Job description

* Start date: ASAP.

* Contract: Freelance via Huxley.

* Project duration: 12 months + possible extension.

Vulnerability Management Security Engineer

We are looking for an experienced Vulnerability Management Security Engineer to join a cybersecurity team focused on vulnerability management, penetration testing, and security automation within a complex international environment.

The selected candidate will play a key role in identifying, assessing, and remediating security vulnerabilities while contributing to the continuous improvement of security processes and automation capabilities. This position requires a hands-on security professional with strong technical expertise, excellent communication skills, and the ability to collaborate effectively across teams.

Key Responsibilities

• Conduct internal penetration testing activities across different environments.


• Manage vulnerability assessments and remediation processes.


• Identify, analyze, prioritize, and propose mitigation plans for security vulnerabilities.


• Support security engineering initiatives across multiple domains.


• Develop and implement automation solutions to improve security operations.


• Contribute to threat intelligence activities and incident response processes.


• Collaborate with technical and business stakeholders to improve overall security posture.


• Support continuous improvement initiatives within the Vulnerability Management program.

Requirements

• 5-8 years of experience as a Security Engineer.


• 3-4 years of penetration testing experience (current or previous).


• Alternatively, 3-4 years of combined Security Engineering and Penetration Testing experience.


• Hands-on experience with penetration testing tools.


• 3-4 years of experience in Vulnerability Management.


• Experience automating security processes and workflows.


• Experience in Threat Intelligence and Incident Response.


• Fluent English (mandatory).


• Strong teamwork and communication skills.

Nice to Have

• Spanish language skills.


• Experience with AWS environments.


• Experience working with Secure Development Lifecycle (SDL/SDLC) environments.


• Exposure to CI/CD practices.

Conditions

• Location: Barcelona.


• Work model: Hybrid.


• Preference for candidates able to attend the office up to 3 days per week.


• Start date: ASAP.


• Contract: Freelance via Huxley.


• Project duration: 12 months + possible extension.


• Interview process:
  
  
  
  • 30-minute interview with the Hiring Manager.
  
  
  • 90-minute technical interview with the technical team.
  
  
  
  

Important Note

• Fluent English is mandatory.


• Strong communication and stakeholder management skills are highly valued by the hiring manager.


• This role requires a collaborative professional who can work effectively within a team environment.


• Candidates should be based in Barcelona or willing to attend the office regularly.