Vulnerability Management Specialist / DevSecOps

Sword Iberia; Barcelona; Remoto; EUR 60.000 - 85.000; Tempo pieno

Descrizione del lavoro

Sword Iberia is seeking a Vulnerability Management Specialist / DevSecOps Engineer to join a long-term project focused on application security, vulnerability management, and automation within development and deployment pipelines. You will work with SonarQube, Checkmarx, OWASP ZAP, Dependabot, and CI/CD tools to improve security across projects.

The role requires experience with SAST/DAST/SCA, OpenShift and Docker, Python or Bash scripting, and familiarity with OWASP Top 10, CWE, CVSS.

Competenze

• At least 3 years of experience in software security, vulnerability management, DevSecOps, or a related field.

Mansioni

• Identify, prioritize, and remediate vulnerabilities throughout the software development lifecycle.

Strumenti

SonarQube

Checkmarx

OWASP ZAP

Dependabot

CI/CD pipelines

Python

Bash scripting

OpenShift

Docker

Git

GitHub

Jira

Descrizione del lavoro

At Sword Iberia, we are looking for a Vulnerability Management Specialist / DevSecOps Engineer to join a long-term project focused on application security, vulnerability management, and automation within development and deployment pipelines.

We are looking for a professional with experience in SonarQube, Checkmarx, OWASP, CI/CD pipelines, OpenShift, and security automation, who can help development and DevOps teams identify, prioritize, and remediate vulnerabilities throughout the software development lifecycle.

• At least 3 years of experience in software security, vulnerability management, DevSecOps, or a related field.
• Experience with application security tools such as SonarQube, Checkmarx, OWASP ZAP, and Dependabot.
• Knowledge of SAST, DAST, and SCA techniques for identifying and assessing security vulnerabilities.
• Experience managing software dependencies and vulnerabilities across ecosystems such as npm, Maven, pip, NuGet, or Go modules.
• Experience with CI/CD pipelines and automating vulnerability detection, dependency updates, and remediation workflows.
• Knowledge of Python and/or Bash scripting for security automation.
• Experience with OpenShift and Docker, including container security practices.
• Knowledge of OWASP Top 10, CWE, and CVSS vulnerability scoring.
• Familiarity with Git, GitHub, and Jira.
• Analytical mindset, problem-solving skills, and the ability to collaborate with development, DevOps, and security teams.

Nice to Have

• Experience with cloud security principles across AWS, Azure, or GCP.
• Knowledge of vulnerability management platforms such as Tenable, Qualys, or Rapid7.
• Familiarity with security standards and compliance frameworks such as ISO 27001, NIST, GDPR, or SOC 2.
• Certifications such as CISSP, OSCP, CEH, or CCSP.

What we offer

• Permanent contract.
• Stable, long-term project.
• Remote work, with occasional visits to the office in Barcelona.
• A strong technical and collaborative environment.

If you are passionate about DevSecOps, application security, and automation, and want to help build more secure software delivery pipelines, we'd love to hear from you!