Application Security Engineer - Barcelona

OverviewIn this role you will strengthen the security of Contentsquare’s global SaaS products.You will partner with product and engineering teams to embed robust security practices across design, development, and deployment.You will lead threat modeling, secure-code reviews, and vulnerability management to prevent and mitigate risks.You will leverage automation and AI to scale security workflows within CI/CD and champion security-as-code.This position offers impact at scale within a security-first culture that values collaboration and continuous improvement.Compensaciones / BeneficiosHybrid/remote work policiesGenerous paid time-offStock optionsLifestyle allowanceEmployee Resource GroupsHackathon and virtual onboardingResponsabilidadesRun continuous automated security audits of global SaaS applications to detect misconfigurations and enforce benchmarksAct as security advisor to product and engineering teams, guiding threat modeling and AppSec reviews during designLead in-depth secure coding reviews and mentor developers on secure patternsArchitect and manage end-to-end vulnerability lifecycle across cloud and app layers with automationImplement AI-driven security workflows to automate vulnerability discovery and validation in CI/CDDrive shift-left initiatives by adding security checks to the automation stack and creating security-as-code toolsOversee private and public bug-bounty programs and coordinate with researchers for high-quality engagementCoordinate external penetration testing and customer security assessments as primary technical contactRespond to application-layer security incidents with root-cause analysis and defensive improvementsRequisitos principales3+ years in Application Security Operations in a high-growth SaaS or cloud-native environmentProficiency with NestJS, Vue.js, and AngularExperience with Snyk, Datadog ASM/AppSec (WAF), Google SecOps, and CrowdstrikeStrong understanding of AWS and Azure, Kubernetes/Docker security, and Terraform IaCAbility to apply AI/LLM tech to automate security tasksScripting experience (Python, Node.js, Shell) for building security toolingKnowledge of web protocols, OWASP Top 10, MITRE ATT&CK, and NIST CSFExperience in ethical hacking, CTFs, or bug bountyExcellent cross-functional collaboration and ability to explain risks to non-technical stakeholdersFluency in Englishcollaborationcommunicationanalytical rigorAppSecThreat modelingSecure coding

Requisitos principales3+ years in Application Security Operations in a high-growth SaaS or cloud-native environment Proficiency with NestJS, Vue.js, and Angular Experience with Snyk, Datadog ASM/AppSec (WAF), Google SecOps, and Crowdstrike Strong understanding of AWS and Azure, Kubernetes/Docker security, and Terraform IaC Ability to apply AI/LLM tech to automate security tasks Scripting experience (Python, Node.js, Shell) for building security tooling Knowledge of web protocols, OWASP Top 10, MITRE ATT&CK, and NIST CSF Experience in ethical hacking, CTFs, or bug bounty Excellent cross-functional collaboration and ability to explain risks to non-technical stakeholders Fluency in English collaboration communication analytical rigor AppSec Threat modeling Secure coding