ppWe are looking for an Application Security Engineer to join our CISOC team, responsible for implementing and managing SAST tools and supporting secure software development across the organization. /p h3Tasks /h3 ul liImplement and manage SAST tools across the organization. /li liConduct security assessments of applications using SAST tools. /li liProvide training and guidance to development teams on the use of SAST tools and secure coding practices. /li liParticipate in the development and enforcement of security policies and procedures. /li liHelp to formulate vulnerability management frameworks working structures. /li liPerform tasks including research, classification and analysis of security events and vulnerabilities detected. /li liAct as point of contact for managing delivering various vulnerability remediation reports. /li liWorking in close collaboration with the IT Team members and stakeholders to deliver and implement technology solutions in support of the business objectives to improve productivity and enhance processes and security. /li liUnderstand BI framework and follow defined processes. Ensure compliant documentation requirements and guarantee its production as required according to the SOPs and working instructions. /li liWork with various risk information security teams in presenting vulnerability management status updates to technology subject matter experts management.



/li /ul h3Must Have /h3 ul liStrong background in DevSecOps, application security, SAST tools, and secure coding practices /li liExperience with CI/CD pipelines (Jenkins) and container orchestration (Kubernetes/OpenShift) /li liProficiency in scripting languages (Python, PowerShell, or Bash) /li /ul h3Nice To Have /h3 ul liKnowledge of security vulnerabilities, threat mitigation, and remediation processes (triage, prioritization, change management) /li liAbility to work in international, multicultural environments with strong English communication skills /li liSolid analytical, problem-solving, teamwork, and results-driven mindset /li liFamiliarity with automation, APIs, and AI in DevOps, including LLMs, agent-based systems, and workflow orchestration /li liRelevant security certifications are a plus but not mandatory /li /ul h3Schedule /h3 ul li08h-17h from Monday to Friday (versátil) /li li4 days remote, on-site every Thursday. /li /ul h3Conditions /h3 ul liSalary package based on your profile. /li liTicket restaurant included in-office hours. /li liFlexible compensation plan (free of income tax) where we provide you with medical insurance, public transport ticket and childcare check. /li liDiscounts in gym network. /li liTraining catalogue. /li /ul pOur goal is that you are well in every way! /p /p #J-18808-Ljbffr

📌 CISOC Application Security Engineer (San Cugat del Vallés)
🏢 Ambit Iberia
📍 San Cugat del Vallés