04 ago
|
Ntt Data Europe & Latam
|
Valencia
04 ago
Ntt Data Europe & Latam
Valencia
ppNTT DATA is looking for a Senior Application Security Engineer for one of our international clients, with strong expertise in application security testing, vulnerability management, and DevSecOps advisory services. The successful candidate will lead security assessments, support vulnerability remediation efforts, advise development teams on secure software development practices, and contribute to application security governance, risk, and compliance initiatives. /p pYou will be responsible for: /p ul liPerform and support application security assessments, including SAST, DAST, SCA, penetration testing, API security testing, and manual security reviews. /li liConduct security testing of web, API, cloud, and enterprise applications using industry-standard tools and techniques. /li liValidate findings, perform false-positive analysis, and execute retesting to verify remediation effectiveness. /li liIdentify and assess security weaknesses related to authentication, authorization, input validation, business logic, insecure design, and vulnerable components. /li liLead vulnerability management activities, including identification, prioritization, remediation tracking, and reporting. /li liPrioritize findings using business impact, exploitability, exposure, threat intelligence, and organizational risk criteria. /li liAdvise development teams on secure coding practices, remediation strategies, and secure SDLC implementation. /li liSupport integration of security testing and vulnerability management processes into CI/CD pipelines and DevSecOps practices. /li liSupport application security policies, standards, risk assessments, threat modeling, and secure design reviews. /li liAssist with security compliance and audit-related activities. /li liDevelop security dashboards and metrics covering vulnerability trends, remediation SLAs, MTTR, and testing coverage. /li liCommunicate security risks and remediation priorities to technical and non-technical stakeholders.
/li /ul pFor this role you will need to have experience in: /p ul liBachelor's or Master's degree in Computer Science, Cybersecurity, Information Technology, or related discipline, or equivalent experience. /li li10+ years of experience in Application Security, Security Testing, Vulnerability Management, or related cybersecurity disciplines. /li liStrong hands-on experience with: /li liSAST /li liDAST /li liSCA /li liPenetration Testing /li liAPI Security Testing /li liManual Security Assessments /li liExtensive experience using Burp Suite for web and API security testing. /li liHands-on experience with tools such as: /li liBurp Suite /li liHCL AppScan /li liSonatype Nexus IQ/Lifecycle /li liFortify /li liSonarQube /li liStrong understanding of OWASP Top 10, CWE, OWASP ASVS, Secure SDLC, vulnerability management, and risk-based prioritization. /li liExperience collaborating with development teams to drive remediation and improve security maturity. /li liStrong written, verbal, and stakeholder communication skills. /li liFluency in English (written and spoken). /li liExperience with Azure Cloud and Azure DevOps. /li liExperience with ServiceNow for vulnerability or incident management workflows. /li liExperience creating security dashboards and reports using Power BI. /li liKnowledge of NIST, MITRE ATTCK, CIS Benchmarks, threat modeling, and application security governance practices. /li liExperience with AI-assisted security solutions, security automation, or agentic AI technologies. /li liCertifications: CISSP, CSSLP, GWAPT, GWEB, OSCP / OSWE, Security+, SSCP, Microsoft Azure Security Certifications (AZ-500 or equivalent) /li /ul pNTT DATA is a integral consultancy company, employing over 20.000 professionals world-wide. Within the International Institutions we have framework contracts with European Institutions like: European Commission; European Parliament; European Court of Auditors; Europol; NATO; Court of Justice; EPO; European Council, United Nations, etc. /p /p #J-18808-Ljbffr
📌 Senior Application Security Engineer - SAST / DAST / Burp Suit - International Organization (Valencia)
🏢 Ntt Data Europe & Latam
📍 Valencia