Vulnerability Management Specialist

Neotalent Conclusion; Barcelona; Hybrid; EUR 60,000 - 90,000; Full time

Benefits offered by this job

Meal vouchers

Transportation allowance

Training and certifications

Private health insurance

Childcare support

Job summary

Neotalent Conclusion is seeking a Vulnerability Management Specialist to join our teams and work with a leading international insurance company in Barcelona. You will monitor and remediate vulnerabilities across dependencies and containers, collaborating with Development, DevOps, and Security teams.

The role requires 3+ years in software security, hands-on with SAST/DAST/SCA tools, OpenShift and Docker, and a solid understanding of OWASP Top 10, CVSS, and CWE.

Qualifications

• Bachelor's degree in CS, cybersecurity, software engineering, IT, or related field.
• 3+ years in software security, vulnerability management, or similar.
• Hands-on with SAST, DAST, and SCA tools.
• Experience with SonarQube, Checkmarx, OWASP ZAP, Dependabot.
• Experience managing dependencies across npm, Maven, pip, NuGet, Go modules.
• CI/CD security process automation.
• Scripting in Python or Bash.
• OpenShift and Docker experience.
• Knowledge of OWASP Top 10, CWE, CVSS.
• Git, GitHub and Jira experience.
• DevSecOps in cloud environments.
• High level of English.
• Hybrid work in Barcelona.

Responsibilities

• Monitor, triage, assess, and prioritize vulnerabilities in dependencies, libraries, and frameworks.
• Analyze security findings from SAST, DAST, and SCA tools such as SonarQube, Checkmarx, OWASP ZAP, and Dependabot.
• Automate dependency update, vulnerability detection, and remediation workflows within CI/CD pipelines.
• Collaborate with Development, DevOps, and Security teams to embed security in SDLC.
• Manage security initiatives within OpenShift and Docker environments.
• Document vulnerability assessments, remediation activities, and compliance evidence using Jira.
• Develop and enforce secure coding standards and dependency management guidelines.
• Prepare reports on vulnerability status, remediation progress, and risk trends for stakeholders.
• Support incident response activities for critical vulnerabilities and high-severity CVEs.
• Ensure compliance with ISO 27001, NIST, GDPR, and SOC 2.

Skills

Vulnerability Management

SAST

DAST

SCA

OpenShift

Docker

Python

Bash

OWASP Top10

Git

Jira

DevSecOps

Cloud security

English

Education

Bachelor's degree in Computer Science or related field

Tools

SonarQube

Checkmarx

OWASP ZAP

Dependabot

Tenable

Qualys

Rapid7

GitHub

Job description

Neotalent Conclusion is one of the leading Iberian specialists in Information Technology and Engineering talent acquisition and management. As part of the Dutch Conclusion group, an ecosystem of 25 companies and 3,600 employees, we focus on increasing our clients’ technological capabilities and accelerating their digital transformation.

At Neotalent Conclusion, we are talent specialists. We attract the best professionals and connect them with the most ambitious projects at the right time. Our success is built on innovation, a results-oriented mindset, and, above all, ensuring that people enjoy fulfilling and rewarding careers.

With more than 25 years of experience, Neotalent Conclusion has offices in Madrid, Lisbon, and Porto. Our company is made up of a team of more than 850 professionals across its different operational areas.

Neotalent, the responsive people.

More information at www.neotalent.pt/en and https://neotalent.pt/en/careers/.

We are looking for a Vulnerability Management Specialist to join our teams and work with a leading international insurance company.

What will your responsibilities be?

• Monitor, triage, assess, and prioritize vulnerabilities in third-party dependencies, libraries, and frameworks.
• Analyze security findings from SAST, DAST, and SCA tools such as SonarQube, Checkmarx, OWASP ZAP, and Dependabot.
• Implement and automate dependency update processes, vulnerability detection, and remediation workflows within CI/CD pipelines.
• Collaborate closely with Development, DevOps, and Security teams to integrate security best practices throughout the software development lifecycle.
• Manage security initiatives within containerized environments, particularly OpenShift and Docker.
• Document vulnerability assessments, remediation activities, and compliance evidence using Jira and vulnerability management platforms.
• Develop and enforce secure coding standards, dependency management guidelines, and security best practices.
• Prepare reports on vulnerability status, remediation progress, and risk trends for stakeholders and security leadership.
• Support incident response activities related to critical vulnerabilities, zero-day exploits, and high-severity CVEs.
• Ensure compliance with internal security policies and external standards such as ISO 27001, NIST, GDPR, and SOC 2.

What profile are we looking for?

• Bachelor's degree in Computer Science, Cybersecurity, Software Engineering, Information Technology, or a related field.
• At least 3 years of experience in Software Security, Vulnerability Management, or similar areas.
• Hands-on experience with SAST, DAST, and SCA security tools.
• Practical knowledge of SonarQube, Checkmarx, OWASP ZAP, and Dependabot.
• Experience managing dependencies across ecosystems such as npm, Maven, pip, NuGet, or Go Modules.
• Experience automating security processes within CI/CD pipelines.
• Scripting and automation skills using Python and/or Bash.
• Experience with container technologies such as OpenShift and Docker.
• Strong understanding of OWASP Top 10, CWE, and CVSS methodologies.
• Experience using Git, GitHub, and Jira.
• Knowledge of DevSecOps practices and security integration within cloud environments.
• High level of English.
• Availability to work in a hybrid model in Barcelona.

Valued Qualifications

• Knowledge of cloud security principles across AWS, Azure, or GCP.
• Experience with vulnerability management platforms such as Tenable, Qualys, or Rapid7.
• Security certifications such as CISSP, OSCP, CEH, or CCSP.
• Experience working within regulated environments and compliance frameworks.
• Be hired by Neotalent Conclusion and work exclusively with our client.
• Access to continuous training and certification programs.
• Enjoy a flexible compensation plan (meal vouchers, transportation allowance, training, private health insurance, childcare support).
• Participate in high-impact cybersecurity and digital transformation initiatives.
• Work with cutting-edge technologies in an international environment.
• Collaborate with multidisciplinary and global teams.