Application Security Engineer

Amaris
Municipality of Zaragoza, Spain
2 days ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Working hours
Regular working hours
Languages
English
Experience level
Intermediate

Job location

Remote
Municipality of Zaragoza, Spain

Tech stack

Computer Security
Python
Powershell
Secure Coding
Software Engineering
Software Vulnerability Management
Scripting (Bash/Python/Go/Ruby)
Software Security
Kubernetes
Devsecops
Static Application Security Testing

Job description

Take your career to the next level with Amaris Consulting as a CISOC Application Security Engineer.Become part of an international team, thrive in a global group with €800M turnover and 1,000+ clients worldwide, and an agile environment by planning the kickoff and follow up on projects.Join Amaris Consulting, where you can develop your potential and make a difference within the company.Descubra si esta oportunidad es adecuada para usted leyendo toda la información que sigue a continuación.WHAT WOULD YOU NEED?Around 3 years of experienceStrong background in DevSecOps and application securityHands-on experience implementing and managing SAST tools (Static Application Security Testing)Solid understanding of secure coding practices and software development lifecyclesExperience working with CI/CD pipelines, ideally JenkinsKnowledge of container orchestration platforms such as Kubernetes and/or OpenShiftProficiency in scripting languages such as Python, PowerShell, or BashAbility to collaborate closely with IT teams, developers, and security stakeholdersStrong analytical skills to research, classify, and analyze security events and vulnerabilitiesGood communication skills to train, guide, and influence development teams and present to managementA structured, documentation-oriented mindset, comfortable working with SOPs and defined processesProfessional proficiency in English (spoken and written); additional languages are a plusWHAT WILL YOU DO?Implement and manage SAST tools across the organization, ensuring effective integration into development workflowsConduct security assessments of applications using SAST tools and support teams in remediationTrain and guide development teams on SAST usage and secure coding best practicesContribute to the development and enforcement of application security policies, standards, and proceduresHelp to define and improve vulnerability management frameworks and working structuresResearch, classify, and analyze security events and vulnerabilities detected by tools and processesAct as a point of contact for managing and delivering various vulnerability and remediation reportsCollaborate closely with IT and project stakeholders to deliver and implement technology solutions that improve productivity, processes, and securityWork within the BI / reporting framework, following defined processes and ensuring compliant documentation according to SOPs and working instructionsPresent vulnerability management status and updates to risk & information security teams, technology SMEs, and managementWHY US?Join our dynamic team of talented individuals and experience a world of growth and opportunities.Here's what we offer:Grow rapidly with a tailored career path and salary evaluation.70% of our senior leaders started at entry level.Enhance your skills through our Tech Academy catalog, Udemy E-learning Platform, language sessions, webinars, and workshops.Take charge of your training with an annual personal budget and company-paid certifications.Enjoy flexible policies, remote work options, and fantastic social benefits like transit and restaurant tickets, kindergarten support, and private health insurance.Benefit from our WeCare program, supporting employees in critical situations.Unleash your full potential, both professionally and personally.Amaris Consulting is proud to be an equal-opportunity workplace.We are committed to promoting diversity within the workforce and creating an inclusive working environment.xsgfvud For this purpose, we welcome applications from all qualified candidates regardless of gender, sexual orientation, race, ethnicity, beliefs, age, marital status, disability, or other characteristics.

Requirements

Around 3 years of experienceStrong background in DevSecOps and application securityHands-on experience implementing and managing SAST tools (Static Application Security Testing)Solid understanding of secure coding practices and software development lifecyclesExperience working with CI/CD pipelines, ideally JenkinsKnowledge of container orchestration platforms such as Kubernetes and/or OpenShiftProficiency in scripting languages such as Python, PowerShell, or BashAbility to collaborate closely with IT teams, developers, and security stakeholdersStrong analytical skills to research, classify, and analyze security events and vulnerabilitiesGood communication skills to train, guide, and influence development teams and present to managementA structured, documentation-oriented mindset, comfortable working with SOPs and defined processesProfessional proficiency in English (spoken and written); additional languages are a plusWHAT WILL YOU DO?

Apply for this position