> Markdown version of [/jobs/ext/3411464-application-security-and-secure-development](https://www.wearedevelopers.com/jobs/ext/3411464-application-security-and-secure-development). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Application Security and Secure Development

- **Company:** GMV
- **Location:** Tres Cantos, Spain (Remote available)
- **Contract:** Temporary contract
- **Skills:** Artificial Intelligence, Software System Penetration Testing, Burp Suite, Cloud Computing, Linux, JSON, Secure Coding, Software Vulnerability Management, Working Model 2D, Scripting, Software Security, Cyber Threat Analysis, Restful APIs, Prisma Cloud Platform, Qualys, Vulnerability Analysis
- **Published:** September 1, 2026
- **Apply:** https://es.indeed.com/viewjob?jk=7855598ce3f54d49

## About the Role

We are looking for a professional with at least 5 years of experience in cybersecurity, with significant experience in Vulnerability Management, and a technical university degree or equivalent qualification.
You should have:

 * Strong knowledge of the vulnerability lifecycle and risk-based prioritization, including CVSS, EPSS, CISA KEV and Threat Intelligence.
 * Experience with vulnerability scanning and management tools, preferably Qualys.
 * Solid knowledge of Windows, Linux, networking, applications, Cloud and container environments.
 * Experience in exploitation analysis, defining mitigations and compensating controls, as well as SLA, KPI and reporting management.
 * Knowledge of scripting, REST APIs, JSON and automation.
 * Strong technical leadership, autonomy and multidisciplinary coordination skills.
 * Security, Hardening/Compliance, Pentesting and tools such as Prisma Cloud, Qualys WAAS or Burp Suite, will be valued.
 * Knowledge of cybersecurity governance and risk.
 * Technical English is required, with a B2 level being recommended.

## Description

You will act as the technical reference for a Vulnerability Management service, leading advanced analysis, risk-based prioritization and vulnerability treatment across infrastructure, applications, Cloud and container environments.
Your main responsibilities will include:

 * Acting as the technical reference for Vulnerability Management operations and resolving technical escalations.
 * Performing advanced analysis and risk-based prioritization, considering factors such as CVSS, EPSS, CISA KEV, exposure, criticality and Threat Intelligence.
 * Defining and monitoring remediation activities, mitigations and compensating controls.
 * Coordinating with specialized Hacking, Cloud, Hardening/Compliance, Threat Intelligence and Automation teams.
 * Supervising critical or actively exploited vulnerabilities, including technical verification and closure.
 * Monitoring SLAs, KPIs and reporting, identifying opportunities for automation and service improvement.
 * Contributing to the evolution of the service and the safe and supervised use of AI in Vulnerability Management.