Overview In this role you will implement and manage SAST capabilities within a general pharma-supporting CISOC team. You will assess applications with SAST, guide developers on secure coding, and help shape vulnerability management processes. The position partners with IT and risk teams to deliver secure technology solutions aligned with business goals.

You'll work in a cross-functional, security-focused environment where automation and policy enforcement matter. This is a hands-on, impact-driven role at the intersection of software development and security, with a mission to strengthen secure software delivery at scale.

Compensaciones / Beneficios Permanent contract

Flexible schedule

Trainings & Certifications

Home Office

Flexible retribution (public transport ticket, Ticket restaurant)

Health insurance

Responsabilidades Implement and manage SAST tools across the organization

Conduct security assessments of applications using SAST tools

Provide training and guidance to development teams on SAST tools and secure coding practices

Develop and enforce security policies and procedures





Help formulate vulnerability management frameworks and working structures

Perform research, classification and analysis of security events and vulnerabilities

Act as point of contact for managing and delivering vulnerability and remediation reports

Collaborate with IT and stakeholders to deliver technology solutions that improve security and productivity

Ensure BI framework processes and compliant documentation per SOPs and instructions

Coordinate vulnerability management status updates with risk and information security teams

Requisitos principales Strong background in DevSecOps, application security, SAST tools, and secure coding practices

Experience with CI/CD pipelines (Jenkins) and container orchestration (Kubernetes/OpenShift)

Proficiency in scripting languages (Python, PowerShell, or Bash)

Strong English communication skills

Analytical and problem-solving mindset

Teamwork and collaboration

SAST tools and secure coding practices

CI/CD pipelines (Jenkins)

Container orchestration (Kubernetes/OpenShift)

📌 CISOC Application Security Engineer (Pharmaceutical Sector) (Barcelona)
🏢 Omega Crm Consulting
📍 Barcelona