> Markdown version of [/jobs/ext/2984187-application-security-and-secure-development](https://www.wearedevelopers.com/jobs/ext/2984187-application-security-and-secure-development). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Application Security And Secure Development - **Company:** Gmv - **Location:** Madrid, Spain (Remote available) - **Contract:** Temporary contract - **Skills:** Artificial Intelligence, Software System Penetration Testing, Burp Suite, Cloud Computing, Linux, JSON, Secure Coding, Software Vulnerability Management, Working Model 2D, Scripting, Software Security, Cyber Threat Analysis, Restful APIs, Prisma Cloud Platform, Qualys, Vulnerability Analysis - **Published:** September 18, 2026 - **Apply:** https://www.buscojobs.com.es/application-security-and-secure-development-en-madrid-ID-372223171 ## About the Role We are looking for a professional with at least 5 years of experience in cybersecurity, with significant experience in Vulnerability Management, and a technical university degree or equivalent qualification.You should have:Strong knowledge of the vulnerability lifecycle and risk-based prioritization, including CVSS, EPSS, CISA KEV and Threat Intelligence.Experience with vulnerability scanning and management tools, preferably Qualys.Solid knowledge of Windows, Linux, networking, applications, Cloud and container environments.Experience in exploitation analysis, defining mitigations and compensating controls, as well as SLA, KPI and reporting management.Knowledge of scripting, REST APIs, JSON and automation.Strong technical leadership, autonomy and multidisciplinary coordination skills.Security, Hardening/Compliance, Pentesting and tools such as Prisma Cloud, Qualys WAAS or Burp Suite, will be valued.Knowledge of cybersecurity governance and risk.Technical English is required, with a B2 ## Description If you want to take the next step in your cybersecurity career, becoming a technical reference in Vulnerability Management within a large-scale service for a financial sector organization, your place is with us.We'll get to the point; we'll tell you what's not on the web.If you want to know more about de GMVWHAT CHALLENGE WILL YOU BE TAKING ON?You will act as the technical reference for a Vulnerability Management service, leading advanced analysis, risk-based prioritization and vulnerability treatment across infrastructure, applications, Cloud and container environments.Your main responsibilities will include:Acting as the technical reference for Vulnerability Management operations and resolving technical escalations.Performing advanced analysis and risk-based prioritization, considering factors such as CVSS, EPSS, CISA KEV, exposure, criticality and Threat Intelligence.Defining and monitoring remediation activities, mitigations and compensating controls.Coordinating with specialized Hacking, Cloud, Hardening/Compliance, Threat Intelligence and Automation teams.Supervising critical or actively exploited vulnerabilities, including technical verification and closure.Monitoring SLAs, KPIs and reporting, identifying opportunities for automation and service improvement.Contributing to the evolution of the service and the safe and supervised use of AI in Vulnerability Management.WHAT DO WE NEEDED IN OUR TEAM?We are looking for a professional with at least 5 years of experience in cybersecurity, with significant experience in Vulnerability Management, and a technical university degree or equivalent qualification.You should have:Strong knowledge of the vulnerability lifecycle and risk-based prioritization, including CVSS, EPSS, CISA KEV and Threat Intelligence.Experience with vulnerability scanning and management tools, preferably Qualys.Solid knowledge of Windows, Linux, networking, applications, Cloud and container environments.Experience in exploitation analysis, defining mitigations and compensating controls, as well as SLA, KPI and reporting management.Knowledge of scripting, REST APIs, JSON and automation.Strong technical leadership, autonomy and multidisciplinary coordination skills.Security, Hardening/Compliance, Pentesting and tools such as Prisma Cloud, Qualys WAAS or Burp Suite, will be valued.Knowledge of cybersecurity governance and risk.Technical English is required, with a B2 level being recommended.WHAT DO WE OFFER?Hybrid working model and 8 weeks per year of teleworking outside your usual geographical area.Flexible start and finish times, and intensive working hours Fridays and in summer.Personalized career plan development, training and language learning support.National and international mobility.Do you come from another country?We can offer you a relocation package.Competitive compensation with ongoing reviews, flexible compensation and discount on brands.Wellbeing program: Health, dental and accident insurance; free fruit and coffee, physical, mental and financial health training, and much more!In our recruitment processes you will always have telephone and personal contact, face-to-face or online, with our talent acquisition team.In addition ## Related Videos - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) - [Tips and Tricks for Working with JSON](https://www.wearedevelopers.com/videos/1229-tips-and-tricks-for-working-with-json) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker) - [Introducing JSON Structure](https://www.wearedevelopers.com/videos/100219-introducing-json-structure) - [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company) ## Related Articles - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers) - [Where To Find Software Engineering Jobs](https://www.wearedevelopers.com/magazine/396-where-to-find-software-engineering-jobs) - [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)