15 ago
|
Optiwisers
|
Vitoria-Gasteiz
15 ago
Optiwisers
Vitoria-Gasteiz
Vulnerability Management Engineer – Application Security | Valencia
Location: Valencia, Spain
Work model: On-site Valencia
Experience: 5–7 years in Application Security and/or Vulnerability Management
Position: Full-time
Contract: B2B / Freelance
Languages: English & Spanish
Summary:
We're looking for a Vulnerability Management Engineer – Application Security to identify, assess, prioritize, and support the remediation of application vulnerabilities throughout the software development lifecycle. You'll work across web, mobile, and cloud-based applications , leveraging vulnerability scanning, manual security testing, automation, and risk-based prioritization to strengthen the organization's security posture.
Key Responsibilities:
Execute and support application vulnerability assessments using SAST, DAST, SCA, and manual security testing .
Validate scanner findings, perform false-positive analysis , and track vulnerabilities through remediation and retesting.
Prioritize vulnerabilities based on business impact, exploitability, exposure, and likelihood ,
using frameworks such as CVSS.
Manage multiple application security initiatives while meeting remediation timelines and SLAs.
Develop dashboards and reports covering vulnerability severity, remediation SLAs, and MTTR .
Support the integration of security scanning and vulnerability management workflows into CI/CD pipelines .
Provide actionable remediation recommendations and coordinate root cause analysis with development teams.
Support threat modeling and application risk assessments , identifying insecure design patterns.
Participate in high-severity and zero-day vulnerability response activities.
Contribute to application and cloud security policies, standards, and security controls.
Required Technical Skills:
Application Security & Vulnerability Management
Strong understanding of OWASP Top 10 , common vulnerability classes, secure architecture, and application security principles.
Hands-on experience with SAST, DAST
📌 Vulnerability Management Engineer – Application Security (Vitoria-Gasteiz)
🏢 Optiwisers
📍 Vitoria-Gasteiz