Application Security Engineer (Devsecops / Sast)

Omega CRM
Madrid, Spain
7 days ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Working hours
Shift work

Tech stack

Application Programming Interfaces (APIs) Artificial Intelligence Bash Shell Cyber Security DevOps Python (Programming Language) Windows PowerShell Salesforce.Com Secure Coding Software Engineering Software Vulnerability Management Scripting
+7 more
Large Language Models Software Security Cyber Threat Analysis Kubernetes Devsecops Jenkins Static Application Security Testing

Job description

Omega CRM Consulting is looking for a CISOC Application Security Engineer that would like to collaborate with one of the top global pharmaceutical companies.This role requires on-site attendance at our Sant Cugat office every Thursday.As member of Cyber Intelligence & Security Operations Center (CISOC) team, he/she will be responsible for implementing and managing Static Application Security Testing (SAST) within our organization.The ideal candidate will have a strong background in software development and security, with a particular focus on the implementation and use of SAST tools: Implement and manage SAST tools across the organization.Conduct security assessments of applications using SAST tools.Provide training and guidance to development teams on the use of SAST tools and secure coding practices.Participate in the development and enforcement of security policies and procedures.Help to formulate vulnerability management frameworks & working structures.Perform tasks including research, classification and analysis of security events and vulnerabilities detected.Act as point of contact for managing & delivering various vulnerability & remediation reports.Working in close collaboration with the IT Team members and stakeholders to deliver and implement technology solutions in support of the business objectives to improve productivity and enhance processes and security.Understand BI framework and follow defined processes.Ensure compliant documentation requirements and guarantee its production as required according to the SOPs and working instructions.Work with various risk & information security teams in presenting vulnerability management status & updates to technology subject matter experts & management.Requirements Strong background in Dev Sec Ops, application security, SAST tools, and secure coding practices Experience with CI/CD pipelines (Jenkins) and container orchestration (Kubernetes/Open Shift) Proficiency in scripting languages (Python, Power Shell, or Bash) Nice to have Requirements Knowledge of security vulnerabilities, threat mitigation, and remediation processes (triage, prioritization, change management) Ability to work in international, multicultural environments with strong English communication skills Solid analytical, problem-solving, teamwork, and results-driven mindset Familiarity with automation, APIs, and AI in Dev Ops, including LLMs, agent-based systems, and workflow orchestration Relevant security certifications are a plus but not mandatory What do We offer Permanent contract.Flexible Schedule.We make it easy.Balance your professional and personal life.Trainings & Certifications.Improve your skills and get the official certificate from our main partners.Home Office.Flexible retribution (public transport ticket, Ticket restaurant,…).Health insurance.OMEGA in action.Our commitment to a better society is not just an intention.About us Omega CRM, a Merkle Company, is a global digital company specialising in accelerating the Business Experience (BX) of our clients through customer-centric solutions, technology, and data - all enhanced by AI.Together with Merkle, we form the largest Customer Experience Management (CXM) agency in Spain, and as part of the dentsu group, we offer end-to-end solutions that integrate media, creativity, content, technology, and strategy to deliver real business impact.With over 23 years of experience, a team of 580+ professionals from 24 nationalities, and 2,500+ certifications, Omega CRM is a recognised leader in the Salesforce ecosystem in Spain.We operate across key industries including Retail, Healthcare, Pharma, Real Estate, Education, and Non-Profit, delivering omnichannel experiences in Customer Service, e Commerce, Marketing, and Analytics.Client satisfaction is at our core (rating: 4.9/5), and we’ve been recognised with awards such as Salesforce Partner of the Year FY23 and Most Innovative Project (Iberia).At Omega CRM, we believe in growth through people - guided by our values: #Talent, #Flexibility, #Commitment, and #Innovation.We grow #Together.#J-*****-Ljbffr

Requirements

Requirements Strong background in Dev Sec Ops, application security, SAST tools, and secure coding practices Experience with CI/CD pipelines (Jenkins) and container orchestration (Kubernetes/Open Shift) Proficiency in scripting languages (Python, Power Shell, or Bash) Nice to have Requirements Knowledge of security vulnerabilities, threat mitigation, and remediation processes (triage, prioritization, change management) Ability to work in international, multicultural environments with strong English communication skills Solid analytical, problem-solving, teamwork, and results-driven mindset Familiarity with automation, APIs, and AI in Dev Ops, including LLMs, agent-based systems, and workflow orchestration Relevant security certifications are a plus but not mandatory What do We offer Permanent contract.

About the company

Flexible Schedule. We make it easy. Balance your professional and personal life. Trainings & Certifications. Improve your skills and get the official certificate from our main partners. Home Office. Flexible retribution (public transport ticket, Ticket restaurant,…). Health insurance. OMEGA in action. Our commitment to a better society is not just an intention. About us Omega CRM, a Merkle Company, is a global digital company specialising in accelerating the Business Experience (BX) of our clients through customer-centric solutions, technology, and data - all enhanced by AI. Together with Merkle, we form the largest Customer Experience Management (CXM) agency in Spain, and as part of the dentsu group, we offer end-to-end solutions that integrate media, creativity, content, technology, and strategy to deliver real business impact. With over 23 years of experience, a team of 580+ professionals from 24 nationalities, and 2,500+ certifications, Omega CRM is a recognised leader in the Salesforce ecosystem in Spain. We operate across key industries including Retail, Healthcare, Pharma, Real Estate, Education, and Non-Profit, delivering omnichannel experiences in Customer Service, e Commerce, Marketing, and Analytics. Client satisfaction is at our core (rating: 4.9/5), and we’ve been recognised with awards such as Salesforce Partner of the Year FY23 and Most Innovative Project (Iberia). At Omega CRM, we believe in growth through people - guided by our values: #Talent, #Flexibility, #Commitment, and #Innovation. We grow #Together. #J-*****-Ljbffr

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.buscojobs.com.es

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

1:22 min

Addressing the shortage of application security specialists

Joseph Katsioloudes Joseph Katsioloudes · WWC 2025

1:15 min

Key lessons learned from implementing automated mobile DevSecOps

Moataz Nabil Moataz Nabil · LIVE

1:02 min

Applying an ETL methodology to infrastructure configuration management

Axel Barbier · WWC 2023

2:17 min

Mapping the maturity roadmap for scaled devops adoption

Dominik Krichbaum Dominik Krichbaum · WWC Europe 2026

2:07 min

Integrating security practices for devsecops adoption

Nevelina Aleksandrova · LIVE

2:09 min

Shifting security left using the DevSecOps approach

Aarno Aukia · LIVE

Videos

See all

Related articles

See all