HQ - Senior Application Security Engineer

Stack

Responsibilities

• ▹Act as the Application Security subject matter expert, partnering with engineering and product teams
• ▹Lead application security reviews, threat modeling, code reviews, and penetration testing
• ▹Design, implement, and automate security controls across CI/CD pipelines (SAST, SCA)
• ▹Drive the technical roadmap of the Application Security program
• ▹Improve and manage application security controls, including WAF, Kubernetes security, and vulnerability management
• ▹Mentor Security Champions and junior engineers
• ▹Define and communicate meaningful Application Security metrics

Requirements

• ▹3-4 years of experience in Information Security, including at least 2 years in Application Security
• ▹Strong experience with Secure SDLC, threat modeling, application security reviews, and secure code reviews
• ▹Hands-on experience with SAST, SCA, and automated security testing integrated into CI/CD pipelines
• ▹Strong knowledge of OWASP Top 10, OWASP ASVS, API security, and secure coding best practices
• ▹Experience implementing and managing WAF solutions, plus internal penetration testing (including APIs) with Burp Suite
• ▹Solid understanding of Kubernetes security, cloud-native applications, and networking fundamentals (HTTP, HTTPS, TCP/IP)
• ▹Basic scripting or development experience, preferably in Python

Soft skills

What we offer

• ▹Fully remote position with flexibility within ±1 hour of CET

About the company

Job&Talent is a world-leading, AI-powered workforce management platform for frontline industries, headquartered in Madrid and operating in 10 countries, having placed millions of workers over the years.