ppIf you've built software and then became obsessed with breaking it — or if you've spent years finding vulnerabilities and now want to prevent them by design — this role was written for you? /p pYou're bjoin the security team /b of a bglobal pharmaceutical leader /b to define how applications are built securely from the ground up. This is not a compliance checkbox role. This is about real ownership, real impact, and building a security culture that developers actually embrace. /p h3What you'll do ? /h3 ul liDefine and implement secure architecture patterns for enterprise applications — from design through deployment. /li liLead threat modeling sessions and security reviews (architecture, code, APIs) across development teams. /li liBe the go-to reference for authentication, certificate management, and cryptographic standards. /li liChampion secure coding practices — OWASP, SAST/DAST, secure CI/CD — and make developers want to follow them. /li liTranslate complex security risks into language that resonates with business stakeholders. /li liMentor developers and software architects; turn security-aware engineers into security advocates. /li liContribute to enterprise-wide security frameworks covering IAM, network security, and application interfaces. /li /ul h3What we're looking for /h3 h3Must-haves: /h3 ul li5+ years in cybersecurity with a clear focus on application security. /li liBackground as a software developer or penetration tester — you understand how things break because you've built or broken them. /li liSolid knowledge of authentication protocols, digital certificates,



and cryptographic standards. /li liHands‑on experience with security architecture reviews and code analysis. /li liFluency in secure coding standards: OWASP Top 10, CWE, and friends. /li liAbility to communicate technical risk clearly to non‑technical audiences. /li liAdvanced English and Spanish (working proficiency in both). /li /ul h3Great to have (but not blockers): /h3 ul liExperience in regulated environments: MDR, HIPAA, GxP, or similar. /li liFamiliarity with pharma or healthcare sector dynamics. /li liHands‑on with tools like Burp Suite, ZAP, SonarQube, or Snyk. /li liKnowledge of DevSecOps and secure pipeline design. /li li1+ year in a formal Security Architect or equivalent role. /li /ul h3What we offer ? /h3 pb Hybrid model: /b Meaningful flexibility — most of the team commutes from Barcelona without issue. /p pb Continuous learning: /b Access to certifications, conferences, and training budget. /p pb? Culture: /b Security‑first mindset, low bureaucracy in the security team, and a company that genuinely values this function. /p pWe know this profile is rare. bWe're not looking for someone who checks every single box /b — bwe're looking for someone with the right foundation and the drive to grow into the full scope of this role. /b /p pIf you came from development and have been shifting toward security, or if you've been doing pentesting and want to move into architecture — let's talk. The 'nice to have' items are genuinely nice to have, not hidden requirements. ? /p /p #J-18808-Ljbffr

📌 Arquitecto de Seguridad de Aplicaciones (Barcelona)
🏢 Itequia
📍 Barcelona