> Markdown version of [/jobs/ext/2686251-ingeniero-a-devsecops-appsec](https://www.wearedevelopers.com/jobs/ext/2686251-ingeniero-a-devsecops-appsec). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Ingeniero/a DevSecOps / AppSec

- **Company:** GMV
- **Location:** Madrid, Spain (Remote available)
- **Contract:** Apprenticeship
- **Skills:** Application Programming Interfaces (APIs), Microsoft Azure, Bash Shell, Continuous Integration, Github, Python (Programming Language), Open Web Application Security, Windows PowerShell, Fortify (Software), SonarQube, Scripting, Software Security, Git, Gitlab-ci, Checkmarx, Devsecops, Jenkins, Static Application Security Testing, Vulnerability Analysis
- **Published:** September 3, 2026
- **Apply:** https://www.tecnoempleo.com/ingeniero-devsecops-appsec-gmv/application-security-sast/rf-ed0f1560c271e31da04f

## About the Role

Buscamos una persona con experiencia y formación práctica en Application Security y DevSecOps, especialmente en la integración de SAST/SCA en entornos CI/CD.

Necesitarás conocimientos de:

 - CI/CD, Git y repositorios de código.
 - OWASP Top 10, CWE, CVE y CVSS, así como análisis de vulnerabilidades y falsos positivos.
 - Desarrollo seguro y SSDLC, incluyendo controles automatizados y Security Gates.
 - APIs y scripting, especialmente Python, PowerShell o Bash.
 - Integración y diagnóstico de herramientas y pipelines.
 - Gestión segura de credenciales, tokens y secretos.
 - Capacidad para analizar código y colaborar con equipos de desarrollo.

Valoraremos experiencia con Checkmarx/Checkmarx One, Fortify, SonarQube y plataformas CI/CD como Azure DevOps, Jenkins, GitHub Actions o GitLab CI/CD.
También valoraremos conocimientos de SBOM, seguridad de la cadena de suministro, IaC y seguridad de contenedores.

## Description

Formarás parte de un servicio de Application Security y SSDLC, trabajando en la implantación y evolución del modelo DevSecOps e integrando controles de seguridad desde las primeras fases del desarrollo.

Tus principales funciones serán:

 - Integrar y automatizar controles SAST/SCA en pipelines CI/CD.
 - Configurar, administrar y optimizar herramientas de seguridad y realizar el onboarding de aplicaciones al modelo DevSecOps.
 - Definir y mantener Security Gates y estrategias de análisis.
 - Analizar vulnerabilidades, gestionar falsos positivos y realizar tuning de reglas.
 - Desarrollar automatizaciones e integraciones mediante APIs y scripting.
 - Diagnosticar incidencias en herramientas, pipelines e integraciones.
 - Dar soporte a desarrolladores en la remediación y revalidación de vulnerabilidades.
 - Contribuir a la mejora continua de los controles SSDLC y a la gestión segura de credenciales y secretos.


## Related Videos

- [The Road to MLOps: How Verivox Transitioned to AWS](https://www.wearedevelopers.com/videos/1050-the-road-to-mlops-how-verivox-transitioned-to-aws)
- [Innovating Developer Tools with AI: Insights from GitHub Next](https://www.wearedevelopers.com/videos/1268-innovating-developer-tools-with-ai-insights-from-github-next)
- [How a Small Team Shrank a Microsoft Monorepo by 94%](https://www.wearedevelopers.com/videos/1236-how-a-small-team-shrank-a-microsoft-monorepo-by-94)
- [Securing Your Web Application Pipeline From Intruders](https://www.wearedevelopers.com/videos/53-securing-your-web-application-pipeline-from-intruders)
- [Real-World Security for Busy Developers](https://www.wearedevelopers.com/videos/1545-real-world-security-for-busy-developers)
- [Our GitOps approach for deploying an Identity Provider and an API Gateway in a SaaS company](https://www.wearedevelopers.com/videos/776-our-gitops-approach-for-deploying-an-identity-provider-and-an-api-gateway-in-a-saas-company)

## Related Articles

- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [Where To Find Software Engineering Jobs](https://www.wearedevelopers.com/magazine/396-where-to-find-software-engineering-jobs)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)
- [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)
- [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers)
- [The 8 Best Code Testing Tools](https://www.wearedevelopers.com/magazine/402-the-8-best-code-testing-tools)