Vulnerability Management Specialist – Hybrid (Barcelona)

Neotalent Conclusion; Barcelona; Híbrido; EUR 40.000 - 64.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Meal vouchers

Transportation allowance

Training

Private health insurance

Childcare support

Descripción de la vacante

Neotalent Conclusion is seeking a Vulnerability Management Specialist to join our teams and work with a leading international insurance company.

You will monitor vulnerabilities in third‑party dependencies, perform analysis with SAST/DAST/ SCA tools, automate remediation in CI/CD, and enforce secure coding standards.

This role requires a +3 years in software security, strong English, and a hybrid Barcelona work model. You will collaborate with DevOps, Security, and Development teams.

Formación

• Bachelor's degree in Computer Science, Cybersecurity, Software Engineering, Information Technology, or related field.
• At least 3 years of experience in Software Security, Vulnerability Management, or similar areas.
• Hands-on experience with SAST, DAST, and SCA security tools.
• Practical knowledge of SonarQube, Checkmarx, OWASP ZAP, and Dependabot.
• Experience managing dependencies across ecosystems such as npm, Maven, pip, NuGet, or Go Modules.
• Experience automating security processes within CI/CD pipelines.
• Scripting and automation skills using Python and/or Bash.
• Experience with container technologies such as OpenShift and Docker.
• Strong understanding of OWASP Top 10, CWE, and CVSS methodologies.
• Experience using Git, GitHub, and Jira.
• Knowledge of DevSecOps practices and security integration within cloud environments.
• High level of English.
• Availability to work in a hybrid model in Barcelona.

Responsabilidades

• Monitor, triage, assess, and prioritize vulnerabilities in third-party dependencies, libraries, and frameworks.
• Analyze security findings from SAST, DAST, and SCA tools such as SonarQube, Checkmarx, OWASP ZAP, and Dependabot.
• Implement and automate dependency update processes, vulnerability detection, and remediation workflows within CI/CD pipelines.
• Collaborate closely with Development, DevOps, and Security teams to integrate security best practices throughout the software development lifecycle.
• Manage security initiatives within containerized environments, particularly OpenShift and Docker.
• Document vulnerability assessments, remediation activities, and compliance evidence using Jira and vulnerability management platforms.
• Develop and enforce secure coding standards, dependency management guidelines, and security best practices.
• Prepare reports on vulnerability status, remediation progress, and risk trends for stakeholders and security leadership.
• Support incident response activities related to critical vulnerabilities, zero-day exploits, and high-severity CVEs.
• Ensure compliance with internal security policies and external standards such as ISO 27001, NIST, GDPR, and SOC 2.

Conocimientos

SAST/DAST/SCA tools

CI/CD security

Python/Bash

OpenShift/Docker

OWASP Top 10/CWE/CVSS

Git/GitHub/Jira

DevSecOps

English

Hybrid Barcelona

Educación

Bachelors in CS/Cybersecurity/SE/IT

Herramientas

SonarQube

Checkmarx

OWASP ZAP

Dependabot

Descripción del empleo

Neotalent Conclusion is seeking a Vulnerability Management Specialist to join our teams and work with a leading international insurance company.

You will monitor vulnerabilities in third‑party dependencies, perform analysis with SAST/DAST/ SCA tools, automate remediation in CI/CD, and enforce secure coding standards.

This role requires a +3 years in software security, strong English, and a hybrid Barcelona work model. You will collaborate with DevOps, Security, and Development teams.