Experteer Overview

Obtenga más información sobre este puesto leyendo los detalles a continuación y luego envíe su solicitud para ser considerado.

In this role you help evolve a corporate security service by combining technical leadership with hands-on AppSec work. You will coordinate the security service while implementing and advancing SSDLC and DevSecOps capabilities within a large organization. Expect to drive security gates, automate controls in CI/CD, and guide risk management and reporting.

This is a hands-on, cross-functional role with a strong focus on impact, automation, and AI-enabled security. You will collaborate with development teams to shape secure software delivery.

Compensaciones / Beneficios

- Technically coordinate the security service, manage demand, plan priorities, capacity, SLAs and KPIs
- Integrate, configure and optimize SAST/SCA controls in CI/CD pipelines
- Coordinate application onboarding and define Security Gates
- Contribute to vulnerability triage, remediation and revalidation
- Act as technical point of contact for customers, providing reporting and follow-up
- Drive automation and industrialization through APIs and scripting
- Manage risks, incidents, deviations and escalations
- Advise development teams and coordinate with different technical areas
- Drive evolution of the SSDLC/DevSecOps model, including AI governance and supervised adoption





Responsabilidades

- Solid experience in Application Security, SSDLC and DevSecOps with service or team coordination
- Knowledge of SAST/SCA, vulnerability management, and CI/CD security
- Familiarity with OWASP, CWE, CVE, CVSS and Secure Coding
- Experience with Git, pipelines and Security Gates
- Understanding of SLA, KPI, demand, capacity and risk management
- Experience with APIs, scripting and automation
- Customer interaction and technical/executive reporting
- AI governance and risk management, including traceability and human oversight
- Experience with Checkmarx, Fortify, SonarQube and CI/CD platforms (Azure DevOps, Jenkins, GitHub xugodme Actions, GitLab CI/CD) is valued
- Knowledge of Cloud, containers, IaC and software supply chain security
- Knowledge of NIST SSDF, OWASP ASVS/SAMM, SBOM, SARIF; security automation; and applying AI to AppSec/DevSecOps
- Relevant training or certifications are valued

Requisitos principales

- Hybrid working model
- 8 weeks teleworking per year
- Adaptable start/end times; intensive Fridays and summer
- Personalized career plan development; training and language learning support
- National and international mobility; relocation package
- Competitive compensation with ongoing reviews; flexible compensation; brand discounts

📌 Application Security and DevSecOps Technical Leader (Tres Cantos)
🏢 GMV
📍 Tres Cantos