> Markdown version of [/jobs/ext/3043767-security-architect](https://www.wearedevelopers.com/jobs/ext/3043767-security-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Security Architect

- **Company:** Liebherr
- **Location:** Madrid, Spain
- **Contract:** Permanent contract
- **Skills:** Kubernetes Security, Amazon Web Services, Microsoft Azure, Cloud Computing, Cloud Computing Security, Cyber Security, DevOps, Github, Identity and Access Management, OAuth, Open Web Application Security, Systems Development Life Cycle, Zero Trust Network Access, JSON Web Token, Sherwood Applied Business Security Architecture, Security Assertion Markup Language (SAML), Software Engineering, Google Cloud, Software Security, Kubernetes, Information Technology, Devsecops, Docker, Jenkins, Static Application Security Testing, Microservices, Dynamic Application Security Testing
- **Published:** September 24, 2026
- **Apply:** https://www.adzuna.es/contact-us.html

## About the Role

Bachelor's/Master's in Cybersecurity, Computer Science, or related field
3+ years in cybersecurity, preferably in application security architecture role
Following certificates are preferred; CISSP, SABSA as well as Cloud certifications (AWS, Azure, or GCP)
English is a Must, German and French are a plus
Good understanding of cybersecurity frameworks and standards (ISO 27001, NIST)
Expertise in OWASP, SSDLC, and DevSecOps, with strong knowledge of secure software architecture
Strong understanding of microservices security, API security, and IAM (e.g. OAuth, SAML, JWT)
Knowledge of cloud-native security and CI/CD integration (e.g. Jenkins, GitHub Actions)
Experience with container security and cloud platforms (e.g. AWS, Azure, GCP, Docker, Kubernetes)

## Description

Develop and enforce application security architecture frameworks, policies, standards, and best practices to align with compliance requirements (e.g. OWASP, NIST, ISO 27001)
Review and approve application security designs while ensuring secure software development and architecture
Integrate security into the software development lifecycle (SDLC) by collaborating with development teams and enabling DevSecOps practices
Adopt and promote a security-by-design approach with the different stakeholders
Conduct threat modeling, security reviews, and risk assessments to proactively identify and mitigate vulnerabilities
Evaluate, recommend, and oversee security tools and testing solutions (SAST, DAST, IAST) to strengthen application security
Define security strategies for applications (e.g. IAM) and Implement Security Principles such as Zero Trust
Actively contribute to the Coporate Information Security architecture community, sharing insights and best practices
Collaborate with IT, EA, DevOps amd Engineering Team to align security Objectives


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [From DevOps to Scaled DevOps: How We’re Rebuilding Continuous Delivery as a Platform](https://www.wearedevelopers.com/videos/100018-from-devops-to-scaled-devops-how-we-re-rebuilding-continuous-delivery-as-a-platform)
- [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect)
- [Docker Compose: Rediscovered](https://www.wearedevelopers.com/videos/1978-docker-compose-rediscovered)
- [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see)
- [DevOps Maturity Check – a way to balance autonomy and alignment](https://www.wearedevelopers.com/videos/58-devops-maturity-check-a-way-to-balance-autonomy-and-alignment)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market)
- [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries)
- [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers)
- [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)