ph3Vulnerability Management Engineer – Application Security /h3 /brpAt Vortech PCI Group, we are looking for a Vulnerability Management Engineer with a strong focus on Application Security to join an international technology environment based in Valencia, Spain. /p /br /brh3What will you do? /h3 /brpYou will work on identifying, validating, prioritizing and tracking application vulnerabilities across web, mobile and cloud-based environments. You will collaborate closely with development, security and technical teams to improve the security posture throughout the software development lifecycle. /p /br /brh3Main responsibilities: /h3 /brul /brliPerform and support application security assessments using SAST, DAST, SCA and manual testing. /li /brliValidate scanner results, analyze false positives and ensure findings are technically accurate. /li /brliUse Burp Suite for manual testing of web applications and APIs. /li /brliPrioritize vulnerabilities based on severity, exploitability, exposure and business impact. /li /brliCoordinate remediation plans with development and security teams. /li /brliTrack vulnerability metrics, remediation SLAs and MTTR. /li /brliSupport the integration of security testing into CI/CD pipelines.



/li /brliParticipate in the response to high-severity vulnerabilities or zero-day situations when required. /li /br /ul /br /brh3What are we looking for? /h3 /brul /brli5+ years of experience in Application Security, Vulnerability Management or similar cybersecurity roles. /li /brliStrong knowledge of OWASP Top 10 and common vulnerabilities in web applications and APIs. /li /brliHands-on experience with Burp Suite. /li /brliExperience with SAST, DAST or SCA tools such as Fortify, Checkmarx, SonarQube, Black Duck, Tenable or similar. /li /brliProgramming or scripting knowledge in Python, Java, .NET or similar. /li /brliAbility to communicate technical risks clearly to different stakeholders. /li /brliAdvanced English level, C1 or equivalent. /li /brliSpanish fluency. /li /br /ul /br /brh3Nice to have: /h3 /brul /brliExperience with Azure or Azure DevOps. /li /brliExperience with ServiceNow for vulnerability or incident tracking. /li /brliKnowledge of NIST, MITRE ATTCK or CIS Benchmarks. /li /brliExperience with Power BI or similar reporting tools. /li /brliCybersecurity certifications such as Security+, SSCP, GWAPT, CISSP or OSCP. /li /br /ul /br /brh3Location and modality: /h3 /brul /brliBased in Valencia, Spain. /li /brliHybrid work model. /li /br /ul /p #J-18808-Ljbffr

📌 Vulnerability Management Engineer | Hybrid in Valencia, Spain
🏢 VORTECH PCI GROUP
📍 Valencia