Experteer Overview
¿Quiere presentar una candidatura? Asegúrese de que su CV está actualizado y luego lea atentamente las siguientes especificaciones del puesto antes de solicitar.
As an Application Security Engineer at Contentsquare, you will safeguard our global SaaS products by integrating security into development, design reviews, and incident response. You’ll drive threat modeling, secure coding practices, and end-to-end vulnerability management, while leveraging AI-enabled security workflows to scale protections. You will collaborate with product, engineering, and external researchers to stay ahead of threats and maintain top security standards. This role offers hands-on impact in a fast-growing, security-conscious environment and the chance to shape security across a leading platform.
Compensaciones / Ventajas
• Conduct automated security audits of general SaaS applications to identify misconfigurations and enforce security benchmarks
• Act as a strategic security consultant to product and engineering teams, leading threat modeling and AppSec reviews during design
• Perform in-depth security-focused code reviews and mentor developers on secure coding practices
• Architect and manage the end-to-end vulnerability lifecycle with automation for triage, reporting, and remediation across cloud and app layers
• Orchestrate AI-driven security workflows to enable scalable vulnerability discovery and validation in CI/CD




• Lead shift-left initiatives by embedding security checkpoints in automation and creating security-as-code tools
• Oversee private and public bug-bounty programs and maintain fast, high-quality engagement with researchers
• Coordinate external penetration testing and customer security assessments as primary technical contact
• Drive incident response for application security events, performing root-cause analysis to prevent recurrence
Responsabilidades
• 3+ years in Application Security Operations in a SaaS or cloud-native environment
• Expertise in NestJS, Vue.js, and Angular
• Hands-on with Snyk, Datadog ASM/AppSec, Google SecOps, and Crowdstrike
• Deep understanding of AWS and xqbhyrx Azure, including Kubernetes/Docker security and Terraform
• Experience applying AI/LLM technologies to automate security tasks
• Scripting skills (Python, Node.js, Shell) to build security tools
• Knowledge of web protocols, OWASP Top 10, MITRE ATTu0026CK, NIST CSF
• Proven track record in ethical hacking, CTF, or bug bounty
• Strong cross-functional collaboration skills and ability to communicate security risk to non-technical stakeholders
• Fluency in English
Requisitos principales
• Virtual onboarding
• Hackathon
• Hybrid/remote work
• Generous paid time off
• Lifestyle allowance
• Stock options for full-time employees

📌 Application Security Engineer (Barcelona)
🏢 Content Square
📍 Barcelona