Cyber Security Analyst - Vulnerability & Attack Surface Management_D-2884

Allianz; España; On-site; PHP 2,411,091 - 3,616,636; Full time

Benefits offered by this job

Hybrid work model

Company bonus scheme

Pension plan

Employee shares program

Healthcare benefits

Job summary

Allianz is seeking a Cyber Security Analyst to protect digital assets and manage vulnerabilities. This role involves web application security testing, analyzing vulnerabilities, and maintaining security standards as part of the Allianz Vulnerability Management (AVM) team.

The ideal candidate should possess 3+ years in cybersecurity with hands-on experience in DAST tools, a strong grasp of web security, and fluent English. The position offers a hybrid work model with various employee benefits.

Qualifications

• 3+ years of experience in cybersecurity, preferably in application security or vulnerability management.
• Hands-on experience with DAST tools like Burp Suite, OWASP ZAP, or AppScan.
• Strong understanding of web security principles, especially OWASP Top 10.

Responsibilities

• Perform web application security testing using DAST tools.
• Analyze, validate, and prioritize vulnerabilities based on risk.
• Support Allianz's Bug Bounty Program and validate submissions.

Skills

Cybersecurity experience

Web application security testing

DAST tools expertise

Vulnerability management

Fluent English

Tools

Burp Suite

OWASP ZAP

Qualys

Nessus

Job description

About the Job

Passionate about cybersecurity and eager to protect global digital assets? We are looking for a Cyber Security Analyst to join our Allianz Vulnerability Management (AVM) team, where you will help identify, assess, and mitigate vulnerabilities across Allianz's digital landscape.

What You Do

• Perform web application security testing using DAST tools to identify vulnerabilities in applications and APIs
• Analyze, validate, and prioritize vulnerabilities based on risk and business impact
• Support and coordinate Allianz's Bug Bounty Program, including validation of submissions
• Monitor Allianz's external attack surface to detect shadow IT and potential risks
• Collaborate with internal teams to ensure timely remediation of vulnerabilities
• Advise stakeholders on remediation strategies and security best practices
• Contribute to the continuous improvement of security processes, tools, and standards

What You Bring

• 3+ years of experience in cybersecurity (application security or vulnerability management preferred)
• Hands‑on experience with DAST tools (e.g., Burp Suite, OWASP ZAP, AppScan)
• Strong understanding of web security (OWASP Top 10, API security)
• Familiarity with vulnerability management tools (e.g., Qualys, Nessus)
• Fluent English and ability to work in international environments

What We Offer

• Hybrid work model with up to 25 days per year working from abroad
• Company bonus scheme, pension, employee shares program, and multiple employee discounts (details vary by location)
• Career development and digital learning programs, international career mobility, and lifelong learning opportunities
• Flexible working, health and wellbeing offers including healthcare and parental leave benefits

Allianz is an equal‑opportunity employer. All employment decisions are made without regard to race, color, religion, sex, national origin, age, disability, or any other status protected by law. We celebrate diversity and are committed to an inclusive workplace for all employees.