> Markdown version of [/jobs/ext/1873890-application-security-engineer-senior-id71663](https://www.wearedevelopers.com/jobs/ext/1873890-application-security-engineer-senior-id71663). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Application Security Engineer (Senior) Id71663 - **Company:** Agileengine - **Location:** Valencia, Spain - **Contract:** Permanent contract - **Skills:** Java (Programming Language), Artificial Intelligence, Continuous Integration, Python (Programming Language), Systems Development Life Cycle, Secure Coding, Software Engineering, Scripting, Large Language Models, Software Security, Devsecops, Security Orchestration, Automation & Response, Static Application Security Testing, Dynamic Application Security Testing - **Published:** August 1, 2026 - **Apply:** https://www.buscojobs.com.es/application-security-engineer-senior-id-71663-en-valencia-ID-364037569 ## About the Role ph3About the Role /h3 pWe are looking for a bSenior Application Security Engineer /b to architect and build automated security layers within the SDLC, engineering AI-enabled secure code scanning, hardened baseline automation, and CI/CD security tooling integration across a large-scale financial services program., The role requires 6+ years of software engineering experience with a strong AppSec and DevSecOps focus. /p h3What You Will Do /h3 ul liEngineer and deploy AI-enabled secure code scanning capabilities and Golden Images to drive secure-from-the-start adoption. /li liAutomate the development of secure coding patterns and integrate them with traditional and Agentic SDLC workflows. /li liArchitect the integration of continuous security scanning tools (SAST, DAST, SCA) into enterprise CI/CD pipelines, tuning them to eliminate noise. /li liAct as a senior technical SME, reading and reviewing complex application code (Java/Python) to provide software engineers with highly specific, code-level remediation guidance. /li /ul h3Must Haves /h3 ul li6+ years of software engineering experience with a strong subsequent focus on Application Security and DevSecOps. /li liStrong coding and architectural proficiency in bPython /b (for security automation and scripting) and/or bJava /b (to confidently read, review, and secure enterprise source code). /li liDeep, hands?on expertise deploying and tuning modern application security testing tools (bSAST /b, bDAST /b, bSCA /b) and integrating them into complex bCI/CD /b orchestration ecosystems. /li liFully autonomous execution capability, requiring no daily supervision to map out and build automated security runbooks. /li liUpper?intermediate English level. /li /ul h3Nice to Haves /h3 ul liExperience integrating LLMs, AI agents, or automated coding assistants to streamline vulnerability triaging or secure code generation. /li liAdvanced application threat modeling experience. ## Description ph3About the Role /h3 pWe are looking for a bSenior Application Security Engineer /b to architect and build automated security layers within the SDLC, engineering AI-enabled secure code scanning, hardened baseline automation, and CI/CD security tooling integration across a large-scale financial services program.You will work in Python and Java to deploy and tune SAST, DAST, and SCA tools, provide code-level remediation guidance to development teams, and operate with full autonomy building automated security runbooks.The role requires 6+ years of software engineering experience with a strong AppSec and DevSecOps focus./p h3What You Will Do /h3 ul liEngineer and deploy AI-enabled secure code scanning capabilities and Golden Images to drive secure-from-the-start adoption./li liAutomate the development of secure coding patterns and integrate them with traditional and Agentic SDLC workflows./li liArchitect the integration of continuous security scanning tools (SAST, DAST, SCA) into enterprise CI/CD pipelines, tuning them to eliminate noise./li liAct as a senior technical SME, reading and reviewing complex application code (Java/Python) to provide software engineers with highly specific, code-level remediation guidance./li /ul h3Must Haves /h3 ul li6+ years of software engineering experience with a strong subsequent focus on Application Security and DevSecOps./li liStrong coding and architectural proficiency in bPython /b (for security automation and scripting) and/or bJava /b (to confidently read, review, and secure enterprise source code)./li liDeep, hands?on expertise deploying and tuning modern application security testing tools (bSAST /b, bDAST /b, bSCA /b) and integrating them into complex bCI/CD /b orchestration ecosystems./li liFully autonomous execution capability, requiring no daily supervision to map out and build automated security runbooks./li liUpper?intermediate English level./li /ul h3Nice to Haves /h3 ul liExperience integrating LLMs, AI agents, or automated coding assistants to streamline vulnerability triaging or secure code generation./li liAdvanced application threat modeling experience./li /ul h3Perks and Benefits /h3 ul libProfessional growth /b: Mentorship, TechTalks, and personalized growth roadmaps./li libCompetitive compensation /b: USD-based pay with education, fitness, and team activity budgets./li libExciting projects /b: Modern solutions with Fortune 500 and top product companies./li libFlextime /b: Flexible schedule with remote and office options./li /ul /p #J-*****-Ljbffr ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [DevSecOps: Injecting Security into Mobile CI/CD Pipelines](https://www.wearedevelopers.com/videos/273-devsecops-injecting-security-into-mobile-ci-cd-pipelines) - [How to Cause (or Prevent) a Massive Data Breach- Secure Coding and IDOR](https://www.wearedevelopers.com/videos/39-how-to-cause-or-prevent-a-massive-data-breach-secure-coding-and-idor) - [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java) - [GenAI Is a Junior Dev With Root Access](https://www.wearedevelopers.com/videos/100191-genai-is-a-junior-dev-with-root-access) - [Why Security-First Development Helps You Ship Better Software Faster](https://www.wearedevelopers.com/videos/1568-why-security-first-development-helps-you-ship-better-software-faster) ## Related Articles - [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Where To Find Software Engineering Jobs](https://www.wearedevelopers.com/magazine/396-where-to-find-software-engineering-jobs) - [How to Become an AI Engineer](https://www.wearedevelopers.com/magazine/331-how-to-become-an-ai-engineer) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)