App & Cloud Vulnerability Lead

Gramian Consultancy
Madrid, Spain
16 days ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Working hours
Regular working hours
Languages
English, Spanish

Tech stack

Agile Methodology Amazon Web Services Microsoft Azure Cloud Computing Continuous Integration DevOps Open Web Application Security Systems Development Life Cycle Secure Coding Software Engineering Software Vulnerability Management Cloud Platform System
+5 more
Software Security Information Technology Static Application Security Testing Vulnerability Analysis Dynamic Application Security Testing

Job description

About UsGramian Consultancy is a boutique consultancy specializing in IT professional services and engineering talent solutions.With a strong background in software engineering and leadership, we help companies build high-performing teams by matching them with professionals who truly fit their needs.Role OverviewOur client is a global technology and digital transformation consultancy delivering enterprise IT operations and cloud management solutions for large international organizations.Their teams help modernize IT infrastructure through automation, observability, and Service Management platforms.We are looking for a mid-level Vulnerability Management Engineer with experience in Application Security, vulnerability assessment, and security remediation.In this role, you will help identify, prioritize, and coordinate the remediation of security vulnerabilities throughout the software development lifecycle, working closely with development, DevOps, and security teams to improve the organization’s overall security posture.Contract : ContractorCommitment : Full-timeLocation : Valencia, Spain (Hybrid / Primarily On-site)Process : 2 Client Interview ProcessNote : English-speaking environment.Spanish is not needed.ResponsibilitiesPerform application vulnerability assessments across web, mobile, and cloud applicationsAnalyze and prioritize security findings based on risk and business impactCoordinate remediation activities with development and engineering teamsSupport vulnerability management throughout the Software Development Lifecycle (SDLC)Conduct security reviews and validate remediation effortsWork with automated vulnerability scanning and security assessment toolsTrack vulnerability metrics and report on remediation progressCollaborate with DevOps and infrastructure teams to improve security practicesContribute to application security processes, standards, and documentationPromote secure development practices across engineering teamsRequirements3+ years of experience in Application Security, Vulnerability Management, or CybersecurityHands-on experience with vulnerability scanning and security assessment toolsStrong understanding of OWASP Top 10 and common application security vulnerabilitiesExperience assessing web, mobile, and/or cloud-based applicationsKnowledge of secure software development practices and the SDLCExperience prioritizing and coordinating vulnerability remediationFamiliarity with cloud environments (AWS, Azure, or GCP)Experience working in Agile development environmentsPreferred QualificationsSecurity certifications such as Security+, CEH, OSCP, CSSLP, or similarExperience with SAST, DAST, SCA, or container security toolsKnowledge of CI/CD security practices and DevSecOpsExperience performing threat modeling or secure code reviewsExperience working with enterprise vulnerability management platforms#J-*****-Ljbffr

Requirements

With a strong background in software engineering and leadership, we help companies build high-performing teams by matching them with professionals who truly fit their needs.Role OverviewOur client is a global technology and digital transformation consultancy delivering enterprise IT operations and cloud management solutions for large international organizations. Their teams help modernize IT infrastructure through automation, observability, and Service Management platforms.We are looking for a mid-level Vulnerability Management Engineer with experience in Application Security, vulnerability assessment, and security remediation. In this role, you will help identify, prioritize, and coordinate the remediation of security vulnerabilities throughout the software development lifecycle, working closely with development, DevOps, and security teams to improve the organization’s overall security posture.Contract : ContractorCommitment : Full-timeLocation : Valencia, Spain (Hybrid / Primarily On-site)Process : 2 Client Interview ProcessNote : English-speaking environment. Spanish is not needed.ResponsibilitiesPerform application vulnerability assessments across web, mobile, and cloud applicationsAnalyze and prioritize security findings based on risk and business impactCoordinate remediation activities with development and engineering teamsSupport vulnerability management throughout the Software Development Lifecycle (SDLC)Conduct security reviews and validate remediation effortsWork with automated vulnerability scanning and security assessment toolsTrack vulnerability metrics and report on remediation progressCollaborate with DevOps and infrastructure teams to improve security practicesContribute to application security processes, standards, and documentationPromote secure development practices across engineering teamsRequirements3+ years of experience in Application Security, Vulnerability Management, or CybersecurityHands-on experience with vulnerability scanning and security assessment toolsStrong understanding of OWASP Top 10 and common application security vulnerabilitiesExperience assessing web, mobile, and/or cloud-based applicationsKnowledge of secure software development practices and the SDLCExperience prioritizing and coordinating vulnerability remediationFamiliarity with cloud environments (AWS, Azure, or GCP)Experience working in Agile development environmentsPreferred QualificationsSecurity certifications such as Security+, CEH, OSCP, CSSLP, or similarExperience with SAST, DAST, SCA, or container security toolsKnowledge of CI/CD security practices and DevSecOpsExperience performing threat modeling or secure code reviewsExperience working with enterprise vulnerability management platforms#J-*****-Ljbffr

About the company

About UsGramian Consultancy is a boutique consultancy specializing in IT professional services and engineering talent solutions.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.buscojobs.com.es

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

2:59 min

Applying secure coding practices and proactive system monitoring

Mihaela-Roxana Ghidersa · LIVE

26:47 min

Exploring pathways to application security careers and research workflows

Vandana Verma Sehgal · LIVE

2:17 min

Mapping the maturity roadmap for scaled devops adoption

Dominik Krichbaum Dominik Krichbaum · World Congress 2026 Europe

1:06 min

Outline of free tools for Microsoft Azure

Radu Vunvulea Radu Vunvulea · World Congress 2022

4:58 min

Scaling security teams through developer advocates

Tanya Janca · World Congress 2021

3:18 min

Scaling global network engineering through DevOps culture

Stuart Clark · LIVE

Videos

See all

Related articles

See all