15 sep
|
GMV
|
Tres Cantos
Experteer Overview
Asegúrese de enviar su solicitud rápidamente para maximizar sus posibilidades de ser considerado para una entrevista. Lea la descripción completa del puesto a continuación.
In this role you will advance automated, scalable DevSecOps within a large organization by embedding security into the SDLC. You’ll work in an Application Security and SSDLC team to evolve security controls from early development stages. You’ll automate SAST/SCA in CI/CD, tune rules, and support remediation with developers. The position offers a hands-on, collaborative environment focused on continuous improvement of security processes and credentials management, with a clear impact on product security.
Compensaciones / Ventajas
• Automate and integrate SAST/SCA controls into CI/CD pipelines
• Configure, administer, and optimize security tools and onboard applications to DevSecOps
• Define and maintain Security Gates and scanning strategies
• Analyze vulnerabilities, manage false positives, and tune detection rules
• Develop automation and integrations using APIs and scripting
• Troubleshoot issues across security tools, pipelines,
and integrations
• Support developers with vulnerability remediation and revalidation
• Contribute to ongoing improvement of SSDLC controls and secure credential management
Responsabilidades
• Practical experience in Application Security and DevSecOps with SAST/SCA in CI/CD environments
• Knowledge of CI/CD, Git, and code repositories
• Understanding of OWASP Top 10, CWE, CVE, and CVSS; vulnerability and false-positive analysis
• Secure development and SSDLC with automated controls xqbhyrx and Security Gates
• APIs and scripting experience (Python, PowerShell, or Bash)
• Tool and pipeline integration and troubleshooting
• Secure management of credentials, tokens, and secrets
• Ability to analyze code and collaborate with development teams
Requisitos principales
• hybrid working model
• teleworking 8 weeks/year
• flexible start/finish times
• career plan development and training
• national and international mobility
• relocation package available
📌 Cybersecurity engineer (Tres Cantos)
🏢 GMV
📍 Tres Cantos