Vulnerability Management Engineer – Application Security | ValenciaSiga leyendo para comprender completamente lo que este trabajo requiere en cuanto a habilidades y experiencia. Si su perfil encaja, presente su candidatura. Location: Valencia, Spain Work model: On-site Valencia Experience: 5–7 years in Application Security and/or Vulnerability Management Position: Full-time Contract: B2B / Freelance Languages: English & SpanishSummary:We’re looking for a Vulnerability Management Engineer – Application Security to identify, assess, prioritize, and support the remediation of application vulnerabilities throughout the software development lifecycle. You’ll work across web, mobile, and cloud-based applications, leveraging vulnerability scanning, manual security testing, automation, and risk-based prioritization to strengthen the organization’s security posture.Key Responsibilities:Execute and support application vulnerability assessments using SAST, DAST, SCA, and manual security testing.Validate scanner findings, perform false-positive analysis, and track vulnerabilities through remediation and retesting.Prioritize vulnerabilities based on business impact, exploitability, exposure, and likelihood, using frameworks such as CVSS.Manage multiple application security initiatives while meeting remediation timelines and SLAs.Develop dashboards and reports covering vulnerability severity, remediation SLAs, and MTTR.Support the integration of security scanning and vulnerability management workflows into CI/CD pipelines.Provide actionable remediation recommendations and coordinate root cause analysis with development teams.Support threat modeling and application risk assessments,



identifying insecure design patterns.Participate in high-severity and zero-day vulnerability response activities.Contribute to application and cloud security policies, standards, and security controls.Required Technical Skills:Application Security & Vulnerability ManagementStrong understanding of OWASP Top 10, common vulnerability classes, secure architecture, and application security principles.Hands-on experience with SAST, DAST, SCA, vulnerability assessment, and remediation processes.Experience prioritizing vulnerabilities using CVSS and risk-based methodologies.Security Testing & ToolsStrong hands-on experience with Burp Suite for web application and API security testing.Experience with tools such as Fortify, Checkmarx, SonarQube, Black Duck, Tenable, and Nmap.Ability to identify complex authentication, authorization, and business-logic vulnerabilities.Automation, Cloud & Security FrameworksProgramming/scripting experience with Python, Java, .NET, or similar technologies.Experience integrating security tools into CI/CD pipelines.Familiarity with NIST, MITRE ATT&CK, and CIS Benchmarks.Experience with Azure and Azure DevOps is a plus.Experience with ServiceNow and vulnerability tracking is desirable.Knowledge of Power BI or similar tools for vulnerability metrics and reporting is a plus. xhfqzwm If you're passionate about Application Security, vulnerability management, and building secure software environments, we'd love to hear from you. Send your CV in English to with reference “MA/Vuln” or just apply to this opportunity.#VulnerabilityManagement #ApplicationSecurity #CyberSecurity #AppSec #OWASP #BurpSuite #SAST #DAST #DevSecOps #Hiring

📌 Java Security Engineer (Valencia)
🏢 Optiwisers
📍 Valencia