> Markdown version of [/jobs/ext/2032177-cisoc-application-security-engineer](https://www.wearedevelopers.com/jobs/ext/2032177-cisoc-application-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# CISOC Application Security Engineer

- **Company:** Omega CRM
- **Location:** San Cugat del Vallés, Spain (Remote available)
- **Contract:** Permanent contract
- **Skills:** Bash Shell, Cyber Security, Python (Programming Language), OpenShift, Windows PowerShell, Secure Coding, Security Information and Event Management, Software Engineering, Software Vulnerability Management, Scripting, Software Security, Cyber Threat Analysis, Kubernetes, Devsecops, Jenkins, Static Application Security Testing
- **Published:** August 12, 2026
- **Apply:** https://es.trabajo.org/oferta-5001-4fc79194180813761791ae9656eb8aa4

## About the Role

Omega CRM Consulting is looking for a CISOC Application Security Engineer that would like to collaborate with one of the top global pharmaceutical companies. As member of Cyber Intelligence & Security Operations Center (CISOC) team, he/she will be responsible for implementing and managing Static Application Security Testing (SAST) within our organization. The ideal candidate will have a strong background in software development and security, with a particular focus on the implementation and use of SAST tools: * Implement and manage SAST tools across the organization. * Conduct security assessments of applications using SAST tools. * Provide training and guidance to development teams on the use of SAST tools and secure coding practices. * Participate in the development and enforcement of security policies and procedures. * Help to formulate vulnerability management frameworks & working structures. * Perform tasks including research, classification and analysis of security events
and vulnerabilities detected. * Act as point of contact for managing & delivering various vulnerability & remediation reports. * Working in close collaboration with the IT Team members and stakeholders to deliver and implement technology solutions in support of the business objectives to improve productivity and enhance processes and security. * Understand BI framework and follow defined processes. Ensure compliant documentation requirements and guarantee its production as required according to the SOPs and working instructions. * Work with various risk & information security teams in presenting vulnerability management status & updates to technology subject matter experts & management. Requirements * Strong background in DevSecOps, application security, SAST tools, and secure coding practices * Experience with CI/CD pipelines (Jenkins) and container orchestration (Kubernetes/OpenShift) * Proficiency in scripting languages (Python, PowerShell, or Bash) Nice to have Requirements



## Related Videos

- [DevSecOps culture](https://www.wearedevelopers.com/videos/783-devsecops-culture)
- [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java)
- [The Road to MLOps: How Verivox Transitioned to AWS](https://www.wearedevelopers.com/videos/1050-the-road-to-mlops-how-verivox-transitioned-to-aws)
- [This Is Not Your Father's .NET](https://www.wearedevelopers.com/videos/967-this-is-not-your-father-s-net)
- [Enterprise-Cloud-Native - Fast-Paced Development & Deployment in a Highly Secure Banking Environment](https://www.wearedevelopers.com/videos/671-enterprise-cloud-native-fast-paced-development-deployment-in-a-highly-secure-banking-environment)
- [Securing Your Web Application Pipeline From Intruders](https://www.wearedevelopers.com/videos/53-securing-your-web-application-pipeline-from-intruders)

## Related Articles

- [The 8 Best Code Testing Tools](https://www.wearedevelopers.com/magazine/402-the-8-best-code-testing-tools)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)
- [Dev Digest 131 - AI'm not sure about OSS](https://www.wearedevelopers.com/magazine/472-dev-digest-131-ai-m-not-sure-about-oss)