Vulnerability Management Specialist

Neotalent Conclusion; Barcelona; Hybrid; EUR 40,000 - 64,000; Full time

Benefits offered by this job

Meal vouchers

Transportation allowance

Training

Private health insurance

Childcare support

Job summary

Neotalent Conclusion is seeking a Vulnerability Management Specialist to join our teams and work with a leading international insurance company.

You will monitor vulnerabilities in third‑party dependencies, perform analysis with SAST/DAST/ SCA tools, automate remediation in CI/CD, and enforce secure coding standards.

This role requires a +3 years in software security, strong English, and a hybrid Barcelona work model. You will collaborate with DevOps, Security, and Development teams.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Software Engineering, Information Technology, or related field.
• At least 3 years of experience in Software Security, Vulnerability Management, or similar areas.
• Hands-on experience with SAST, DAST, and SCA security tools.
• Practical knowledge of SonarQube, Checkmarx, OWASP ZAP, and Dependabot.
• Experience managing dependencies across ecosystems such as npm, Maven, pip, NuGet, or Go Modules.
• Experience automating security processes within CI/CD pipelines.
• Scripting and automation skills using Python and/or Bash.
• Experience with container technologies such as OpenShift and Docker.
• Strong understanding of OWASP Top 10, CWE, and CVSS methodologies.
• Experience using Git, GitHub, and Jira.
• Knowledge of DevSecOps practices and security integration within cloud environments.
• High level of English.
• Availability to work in a hybrid model in Barcelona.

Responsibilities

• Monitor, triage, assess, and prioritize vulnerabilities in third-party dependencies, libraries, and frameworks.
• Analyze security findings from SAST, DAST, and SCA tools such as SonarQube, Checkmarx, OWASP ZAP, and Dependabot.
• Implement and automate dependency update processes, vulnerability detection, and remediation workflows within CI/CD pipelines.
• Collaborate closely with Development, DevOps, and Security teams to integrate security best practices throughout the software development lifecycle.
• Manage security initiatives within containerized environments, particularly OpenShift and Docker.
• Document vulnerability assessments, remediation activities, and compliance evidence using Jira and vulnerability management platforms.
• Develop and enforce secure coding standards, dependency management guidelines, and security best practices.
• Prepare reports on vulnerability status, remediation progress, and risk trends for stakeholders and security leadership.
• Support incident response activities related to critical vulnerabilities, zero-day exploits, and high-severity CVEs.
• Ensure compliance with internal security policies and external standards such as ISO 27001, NIST, GDPR, and SOC 2.

Skills

SAST/DAST/SCA tools

CI/CD security

Python/Bash

OpenShift/Docker

OWASP Top 10/CWE/CVSS

Git/GitHub/Jira

DevSecOps

English

Hybrid Barcelona

Education

Bachelors in CS/Cybersecurity/SE/IT

Tools

SonarQube

Checkmarx

OWASP ZAP

Dependabot

Job description

Neotalent Conclusion is one of the leading Iberian specialists in Information Technology and Engineering talent acquisition and management. As part of the Dutch Conclusion group, an ecosystem of 25 companies and 3,600 employees, we focus on increasing our clients’ technological capabilities and accelerating their digital transformation.

At Neotalent Conclusion, we are talent specialists. We attract the best professionals and connect them with the most ambitious projects at the right time. Our success is built on innovation, a results-oriented mindset, and, above all, ensuring that people enjoy fulfilling and rewarding careers.

With more than 25 years of experience, Neotalent Conclusion has offices in Madrid, Lisbon, and Porto. Our company is made up of a team of more than 850 professionals across its different operational areas.

Neotalent, the responsive people.

More information at www.neotalent.pt/en and https://neotalent.pt/en/careers/.

We are looking for a Vulnerability Management Specialist to join our teams and work with a leading international insurance company.

What will your responsibilities be?

• Monitor, triage, assess, and prioritize vulnerabilities in third-party dependencies, libraries, and frameworks.
• Analyze security findings from SAST, DAST, and SCA tools such as SonarQube, Checkmarx, OWASP ZAP, and Dependabot.
• Implement and automate dependency update processes, vulnerability detection, and remediation workflows within CI/CD pipelines.
• Collaborate closely with Development, DevOps, and Security teams to integrate security best practices throughout the software development lifecycle.
• Manage security initiatives within containerized environments, particularly OpenShift and Docker.
• Document vulnerability assessments, remediation activities, and compliance evidence using Jira and vulnerability management platforms.
• Develop and enforce secure coding standards, dependency management guidelines, and security best practices.
• Prepare reports on vulnerability status, remediation progress, and risk trends for stakeholders and security leadership.
• Support incident response activities related to critical vulnerabilities, zero-day exploits, and high-severity CVEs.
• Ensure compliance with internal security policies and external standards such as ISO 27001, NIST, GDPR, and SOC 2.

What profile are we looking for?

• Bachelor's degree in Computer Science, Cybersecurity, Software Engineering, Information Technology, or a related field.
• At least 3 years of experience in Software Security, Vulnerability Management, or similar areas.
• Hands-on experience with SAST, DAST, and SCA security tools.
• Practical knowledge of SonarQube, Checkmarx, OWASP ZAP, and Dependabot.
• Experience managing dependencies across ecosystems such as npm, Maven, pip, NuGet, or Go Modules.
• Experience automating security processes within CI/CD pipelines.
• Scripting and automation skills using Python and/or Bash.
• Experience with container technologies such as OpenShift and Docker.
• Strong understanding of OWASP Top 10, CWE, and CVSS methodologies.
• Experience using Git, GitHub, and Jira.
• Knowledge of DevSecOps practices and security integration within cloud environments.
• High level of English.
• Availability to work in a hybrid model in Barcelona.

Valued Qualifications

• Knowledge of cloud security principles across AWS, Azure, or GCP.
• Experience with vulnerability management platforms such as Tenable, Qualys, or Rapid7.
• Security certifications such as CISSP, OSCP, CEH, or CCSP.
• Experience working within regulated environments and compliance frameworks.
• Be hired by Neotalent Conclusion and work exclusively with our client.
• Access to continuous training and certification programs.
• Enjoy a flexible compensation plan (meal vouchers, transportation allowance, training, private health insurance, childcare support).
• Participate in high-impact cybersecurity and digital transformation initiatives.
• Work with cutting-edge technologies in an international environment.
• Collaborate with multidisciplinary and global teams.