> Markdown version of [/jobs/ext/2161892-engineer-security](https://www.wearedevelopers.com/jobs/ext/2161892-engineer-security). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Engineer - Security

- **Company:** ISG International Service Group
- **Location:** Burgos, Spain (Remote available)
- **Contract:** Permanent contract
- **Skills:** Java (Programming Language), .NET Framework, Application Programming Interfaces (APIs), Microsoft Azure, Burp Suite, Continuous Integration, Python (Programming Language), Open Web Application Security, Software Engineering, Software Vulnerability Management, Web Applications, Scripting, Software Security, Tenable Nessus, Servicenow, Programming Languages
- **Published:** August 21, 2026
- **Apply:** https://www.buscojobs.com.es/engineer-security-en-burgos-ID-368452002

## About the Role

You should bring solid hands-on experience in application security or vulnerability management, a good understanding of OWASP risks and the ability to communicate clearly with both technical and business stakeholders.
Experience with scripting or development languages such as Python, Java or .
NET will be valuable.
Knowledge of Azure, Azure DevOps, ServiceNow, security dashboards or recognised security frameworks would be an additional advantage.
There is flexibility regarding years of experience.
A professional with around three or four years of directly relevant experience may be considered where the technical capability, autonomy and stakeholder skills are strong.
Practical information
Fully remote Iberia
Permanent employment contract
Fluent professional English required
Spanish is advantageous, but not mandatory
Applicants must be able to work in Spain without employer sponsorship
This opportunity may be particularly attractive to someone who wants to move beyond identifying problems and play an active role in improving the way application-security risk is managed across the software lifecycle.
#ApplicationSecurity #AppSec #CyberSecurityJobs #VulnerabilityManagement #RemoteJobsSpain #RemoteJobsPortugal

## Description

Do you enjoy investigating whether a reported vulnerability is genuinely exploitable, explaining why it matters and helping engineering teams fix it properly?We are recruiting an Application Security & Remediation Engineer for a permanent position within a long-term international technology programme.This is not a role focused solely on running scanning tools.You will examine findings, remove false positives, assess real-world risk and work with development teams until the underlying issue has been resolved and successfully retested.What you will work onManual testing of web applications and APIs using Burp Suite.Analysis of findings produced by code, dependency and runtime security tools.Risk-based prioritisation of vulnerabilities.Remediation guidance and follow-up with engineering teams.Security integration within CI/CD workflows.Application risk reviews and secure-design discussions.Reporting on remediation progress, risk trends and outstanding actions.Support during urgent or high-impact vulnerability events.What we are looking forYou should bring solid hands-on experience in application security or vulnerability management, a good understanding of OWASP risks and the ability to communicate clearly with both technical and business stakeholders.Experience with scripting or development languages such as Python, Java or .NET will be valuable.Knowledge of Azure, Azure DevOps, ServiceNow, security dashboards or recognised security frameworks would be an additional advantage.There is flexibility regarding years of experience.A professional with around three or four years of directly relevant experience may be considered where the technical capability, autonomy and stakeholder skills are strong.Practical informationFully remote IberiaPermanent employment contractFluent professional English requiredSpanish is advantageous, but not mandatoryApplicants must be able to work in Spain without employer sponsorshipThis opportunity may be particularly attractive to someone who wants to move beyond identifying problems and play an active role in improving the way application-security risk is managed across the software lifecycle.#ApplicationSecurity #AppSec #CyberSecurityJobs #VulnerabilityManagement #RemoteJobsSpain #RemoteJobsPortugal


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Applying Agile Principles to Incident Management ](https://www.wearedevelopers.com/videos/101-applying-agile-principles-to-incident-management)
- [How to Cause (or Prevent) a Massive Data Breach- Secure Coding and IDOR](https://www.wearedevelopers.com/videos/39-how-to-cause-or-prevent-a-massive-data-breach-secure-coding-and-idor)
- [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java)
- [Your next 10x engineer isn't in your city. Refactor accordingly.](https://www.wearedevelopers.com/videos/100103-your-next-10x-engineer-isn-t-in-your-city-refactor-accordingly)
- [AI in Production: applied AI & enterprise use cases](https://www.wearedevelopers.com/videos/100130-ai-in-production-applied-ai-enterprise-use-cases)

## Related Articles

- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers)
- [Where to Find Entry-Level Software Engineering Jobs](https://www.wearedevelopers.com/magazine/397-where-to-find-entry-level-software-engineering-jobs)
- [Where To Find Software Engineering Jobs](https://www.wearedevelopers.com/magazine/396-where-to-find-software-engineering-jobs)
- [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)