> Markdown version of [/jobs/ext/3086407-security-application-analyst](https://www.wearedevelopers.com/jobs/ext/3086407-security-application-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Security Application Analyst

- **Company:** ISG Personalmanagement
- **Location:** Valencia, Spain
- **Contract:** Permanent contract
- **Skills:** ASP.NET, Java (Programming Language), .NET Framework, PHP (Programming Language), Agile Methodology, Software System Penetration Testing, Microsoft Azure, Burp Suite, Unix, Code Review, Continuous Integration, Github, Python (Programming Language), Open Web Application Security, PCI Data Security Standards, Secure Coding, Software Engineering, SonarQube, Software Vulnerability Management, Sonatype, Software Security, Veracode, Checkmarx, Devsecops, Jenkins, Static Application Security Testing, Dynamic Application Security Testing
- **Published:** September 26, 2026
- **Apply:** https://www.buscojobs.com.es/security-application-analyst-en-valencia-ID-372763202

## About the Role

OverviewIn this role you will help secure customer-facing applications within a regulated betting environment.

## Description

OverviewIn this role you will help secure customer-facing applications within a regulated betting environment.You will work with the Sofia cybersecurity team to integrate security into Agile development, focusing on vulnerability management, code reviews, and compliance.You'll bridge development and security across Java, .NET, Python, and PHP stacks, addressing risk and threats.This position offers impact at scale in global cybersecurity operations, with a practical DevSecOps focus and opportunities to shape secure coding practices.Compensaciones / BeneficiosCompetitive salaryhybrid work in Sofias tech hubgrowth in global cybersecurity operationsResponsabilidadesPerform SAST, DAST, and penetration testing using Checkmarx, Burp Suite, OWASP ZAP, and SnykReview code, manage software composition analysis for third-party libraries, and embed security into CI/CD pipelines using Jenkins or Azure DevOpsInvestigate security incidents, support SOC operations, and ensure PCI DSS/ISO compliance while educating developers on OWASP Top 10 risksRequisitos principales3+ years in software development (Java, .NET, Python, PHP) with transition to application securityProficiency with SAST/DAST tools (SonarQube, Veracode, Semgrep), WAF configuration, and runtime monitoring (Contrast Security)Knowledge of secure frameworks (Spring, ASP.NET), Unix systems, and regulated industry standardsproblem-solvingteam collaborationeffective communicationSAST/DAST tooling (Checkmarx, Burp Suite, OWASP ZAP, Snyk, SonarQube, Veracode, Semgrep)CI/CD security integration (Jenkins, Azure DevOps, GitHub Actions)runtime application security (Contrast Security)


## Related Videos

- [WeAreDevelopers LIVE - Node and Package Security](https://www.wearedevelopers.com/videos/2138-wearedevelopers-live-node-and-package-security)
- [Innovating Developer Tools with AI: Insights from GitHub Next](https://www.wearedevelopers.com/videos/1268-innovating-developer-tools-with-ai-insights-from-github-next)
- [Building Multi-Tenant ASP.NET Core Applications: Best Practices and Real-World Solutions](https://www.wearedevelopers.com/videos/1552-building-multi-tenant-asp-net-core-applications-best-practices-and-real-world-solutions)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [The Time Paradox: Building Timezone-Safe Python/Django Applications](https://www.wearedevelopers.com/videos/1915-the-time-paradox-building-timezone-safe-python-django-applications)
- [Software Security 101: Secure Coding Basics](https://www.wearedevelopers.com/videos/220-software-security-101-secure-coding-basics)

## Related Articles

- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries)
- [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers)
- [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [The 8 Best Code Testing Tools](https://www.wearedevelopers.com/magazine/402-the-8-best-code-testing-tools)