> Markdown version of [/jobs/ext/1883306-application-security-engineer-senior-id71663](https://www.wearedevelopers.com/jobs/ext/1883306-application-security-engineer-senior-id71663). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Application Security Engineer (Senior) Id71663 - **Company:** Agileengine - **Location:** Barcelona, Spain - **Contract:** Permanent contract - **Skills:** Java (Programming Language), Artificial Intelligence, Continuous Integration, Python (Programming Language), Systems Development Life Cycle, Secure Coding, Software Engineering, Scripting, Large Language Models, Software Security, Devsecops, Security Orchestration, Automation & Response, Static Application Security Testing, Dynamic Application Security Testing - **Published:** August 1, 2026 - **Apply:** https://www.buscojobs.com.es/application-security-engineer-senior-id-71663-en-barcelona-ID-364116934 ## About the Role ABOUT THE ROLE We are looking for a Senior Application Security Engineer to architect and build automated security layers within the SDLC, engineering AI-enabled secure code scanning, hardened baseline automation, and CI/CD security tooling integration across a large-scale financial services program., The role requires 6+ years of software engineering experience with a strong AppSec and DevSecOps focus. WHAT YOU WILL DO - Engineer and deploy AI-enabled secure code scanning capabilities and Golden Images to drive secure-from-the-start adoption; - Automate the development of secure coding patterns and integrate them with traditional and Agentic SDLC workflows; - Architectthe integration of continuous security scanning tools (SAST, DAST, SCA) into enterprise CI/CD pipelines, tuning them to eliminate noise; - Act as a senior technical SME, reading and reviewing complex application code (Java/Python) to provide software engineers with highly specific, code-level remediation guidance. MUST HAVES - 6+ years of software engineering experience with a strong subsequent focus on Application Security and DevSecOps; - Strong coding and architectural proficiency in Python (for security automation and scripting) and/or Java (to confidently read, review, and secure enterprise source code); - Deep, hands-on expertise deploying and tuning modern application security testing tools (SAST , DAST , SCA ) and integrating them into complex CI/CD orchestration ecosystems; - Fully autonomous execution capability, requiring no daily supervision to map out and build automated security runbooks; - Upper-intermediate English level. NICE TO HAVES - Experience integrating LLMs, AI agents, or automated coding assistants to streamline vulnerability triaging or secure code generation; - Advanced application threat modeling experience. PERKS AND BENEFITS - Professional growth : Mentorship, TechTalks, and personalized growth roadmaps., Requirements 6+ years of software engineering experience with a strong subsequent focus on Application Security and DevSecOps. Strong coding and architectural proficiency in Python (for security automation and scripting) and/or Java (to confidently read, review, and secure enterprise source code). Deep, hands-on expertise deploying and tuning modern application security testing tools (SAST, DAST, SCA) and integrating them into complex CI/CD orchestration ecosystems. Fully autonomous execution capability, requiring no daily supervision to map out and build automated security runbooks. ## Description Job Description AgileEngine is an Inc. **** company that creates award-winning software for Fortune 500 brands and trailblazing startups across 17+ industries.We rank among the leaders in areas like application development and AI/ML, and our people-first culture has earned us multiple Best Place to Work awards.WHY JOIN US If you're looking for a place to grow, make an impact, and work with people who care, we'd love to meet you!ABOUT THE ROLE We are looking for a Senior Application Security Engineer to architect and build automated security layers within the SDLC, engineering AI-enabled secure code scanning, hardened baseline automation, and CI/CD security tooling integration across a large-scale financial services program.You will work in Python and Java to deploy and tune SAST, DAST, and SCA tools, provide code-level remediation guidance to development teams, and operate with full autonomy building automated security runbooks.The role requires 6+ years of software engineering experience with a strong AppSec and DevSecOps focus.WHAT YOU WILL DO - Engineer and deploy AI-enabled secure code scanning capabilities and Golden Images to drive secure-from-the-start adoption; - Automate the development of secure coding patterns and integrate them with traditional and Agentic SDLC workflows; - Architectthe integration of continuous security scanning tools (SAST, DAST, SCA) into enterprise CI/CD pipelines, tuning them to eliminate noise; - Act as a senior technical SME, reading and reviewing complex application code (Java/Python) to provide software engineers with highly specific, code-level remediation guidance.MUST HAVES - 6+ years of software engineering experience with a strong subsequent focus on Application Security and DevSecOps; - Strong coding and architectural proficiency in Python (for security automation and scripting) and/or Java (to confidently read, review, and secure enterprise source code); - Deep, hands-on expertise deploying and tuning modern application security testing tools (SAST , DAST , SCA ) and integrating them into complex CI/CD orchestration ecosystems; - Fully autonomous execution capability, requiring no daily supervision to map out and build automated security runbooks; - Upper-intermediate English level.NICE TO HAVES - Experience integrating LLMs, AI agents, or automated coding assistants to streamline vulnerability triaging or secure code generation; - Advanced application threat modeling experience.PERKS AND BENEFITS - Professional growth : Mentorship, TechTalks, and personalized growth roadmaps.- Competitive compensation : USD-based pay with education, fitness, and team activity budgets.- Exciting projects : Modern solutions with Fortune 500 and top product companies.- Flextime : Flexible schedule with remote and office options.Meet Our Recruitment Process Application ? Coding Challenge ? Video Interview ? Technical Interview or Hiring Manager Interview Each step helps us understand your skills and overall fit.If it's a match, you'll receive an offer.Requirements 6+ years of software engineering experience with a strong subsequent focus on Application Security and DevSecOps.Strong coding and architectural proficiency in Python (for security automation and scripting) and/or Java (to confidently read, review, and secure enterprise source code).Deep, hands-on expertise deploying and tuning modern application security testing tools (SAST, DAST, SCA) and integrating them into complex CI/CD orchestration ecosystems.Fully autonomous execution capability, requiring no daily supervision to map out and build automated security runbooks. ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [DevSecOps: Injecting Security into Mobile CI/CD Pipelines](https://www.wearedevelopers.com/videos/273-devsecops-injecting-security-into-mobile-ci-cd-pipelines) - [How to Cause (or Prevent) a Massive Data Breach- Secure Coding and IDOR](https://www.wearedevelopers.com/videos/39-how-to-cause-or-prevent-a-massive-data-breach-secure-coding-and-idor) - [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java) - [DevSecOps: Security in DevOps](https://www.wearedevelopers.com/videos/36-devsecops-security-in-devops) - [DevSecOps culture](https://www.wearedevelopers.com/videos/783-devsecops-culture) ## Related Articles - [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers) - [Where To Find Software Engineering Jobs](https://www.wearedevelopers.com/magazine/396-where-to-find-software-engineering-jobs) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Where to Find Entry-Level Software Engineering Jobs](https://www.wearedevelopers.com/magazine/397-where-to-find-entry-level-software-engineering-jobs) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)