> Markdown version of [/jobs/ext/4597755-security-architect](https://www.wearedevelopers.com/jobs/ext/4597755-security-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Security Architect

- **Company:** Liebherr
- **Location:** Madrid, Spain
- **Contract:** Permanent contract
- **Skills:** Kubernetes Security, Amazon Web Services, Microsoft Azure, Cloud Computing, Cloud Computing Security, Cyber Security, DevOps, Github, Identity and Access Management, OAuth, Open Web Application Security, Systems Development Life Cycle, Zero Trust Network Access, JSON Web Token, Sherwood Applied Business Security Architecture, Security Assertion Markup Language (SAML), Software Engineering, Google Cloud, Software Security, Kubernetes, Information Technology, Devsecops, Docker, Jenkins, Static Application Security Testing, Microservices, Dynamic Application Security Testing
- **Published:** November 6, 2026
- **Apply:** https://www.adzuna.es/details/5953556036

## About the Role

Bachelor's/Master's in Cybersecurity, Computer Science, or related field
3+ years in cybersecurity, preferably in application security architecture role
Following certificates are preferred; CISSP, SABSA as well as Cloud certifications (AWS, Azure, or GCP)
English is a Must, German and French are a plus
Good understanding of cybersecurity frameworks and standards (ISO *****, NIST)
Expertise in OWASP, SSDLC, and DevSecOps, with strong knowledge of secure software architecture
Strong understanding of microservices security, API security, and IAM (e.g. OAuth, SAML, JWT)
Knowledge of cloud-native security and CI/CD integration (e.g. Jenkins, GitHub Actions)
Experience with container security and cloud platforms (e.g. AWS, Azure, GCP, Docker, Kubernetes)

## Description

The working location for this position will be in Madrid city where we are currently setting up a new office. We operate a hybrid model, requiring at least 40% of the working time on-site.
Creating passion: your responsibilities
Develop and enforce application security architecture frameworks, policies, standards, and best practices to align with compliance requirements (e.g. OWASP, NIST, ISO *****)
Review and approve application security designs while ensuring secure software development and architecture
Integrate security into the software development lifecycle (SDLC) by collaborating with development teams and enabling DevSecOps practices
Adopt and promote a security-by-design approach with the different stakeholders
Conduct threat modeling, security reviews, and risk assessments to proactively identify and mitigate vulnerabilities
Evaluate, recommend, and oversee security tools and testing solutions (SAST, DAST, IAST) to strengthen application security
Define security strategies for applications (e.g. IAM) and Implement Security Principles such as Zero Trust
Actively contribute to the Coporate Information Security architecture community, sharing insights and best practices
Collaborate with IT, EA, DevOps amd Engineering Team to align security Objectives