Vulnerability Management Specialist
Guarda esta oferta y sigue tu búsqueda
Crea una cuenta gratis para guardar empleos, crear alertas y volver a esta oferta desde tu panel.
Al continuar, aceptas nuestros Términos & Política de Privacidad.
At Sword Iberia , we are looking for a Vulnerability Management Specialist / DevSecOps Engineer to join a long-term project focused on application security, vulnerability management, and automation within development and deployment pipelines.
We are looking for a professional with experience in SonarQube, Checkmarx, OWASP, CI/CD pipelines, OpenShift, and security automation , who can help development and DevOps teams identify, prioritize, and remediate vulnerabilities throughout the software development lifecycle.
At least 3 years of experience in software security, vulnerability management, DevSecOps, or a related field.
Experience with application security tools such as SonarQube, Checkmarx, OWASP ZAP, and Dependabot .
Knowledge of SAST, DAST, and SCA techniques for identifying and assessing security vulnerabilities.
Experience managing software dependencies and vulnerabilities across ecosystems such as npm, Maven, pip, NuGet, or Go modules .
Experience with CI/CD pipelines and automating vulnerability detection, dependency updates, and remediation workflows.
Knowledge of Python and/or Bash scripting for security automation.
Experience with OpenShift and Docker , including container security practices.
Knowledge of OWASP Top 10, CWE, and CVSS vulnerability scoring.
Familiarity with Git, GitHub, and Jira.
Analytical mindset, problem-solving skills, and the ability to collaborate with development, DevOps, and security teams.
Nice to Have Experience with cloud security principles across AWS, Azure, or GCP .
Knowledge of vulnerability management platforms such as Tenable, Qualys, or Rapid7 .
Familiarity with security standards and compliance frameworks such as ISO *, NIST, GDPR, or SOC 2 .
Certifications such as CISSP, OSCP, CEH, or CCSP .
What we offer Permanent contract.
Stable, long-term project.
Remote work, with occasional visits to the office in Barcelona .
A strong technical and collaborative environment.
If you are passionate about DevSecOps, application security, and automation , and want to help build more secure software delivery pipelines, we'd love to hear from you
#J-*-Ljbffr