Overview
In this role you will help secure customer-facing applications within a regulated betting environment. You will work with the Sofia cybersecurity team to integrate security into Agile development, focusing on vulnerability management, code reviews, and compliance. You'll bridge development and security across Java, .NET, Python, and PHP stacks, addressing risk and threats. This position offers impact at scale in integral cybersecurity operations, with a practical DevSecOps focus and opportunities to shape secure coding practices.
Compensaciones / Beneficios Competitive salary
hybrid work in Sofias tech hub
growth in global cybersecurity operations
Responsabilidades Perform SAST, DAST, and penetration testing using Checkmarx, Burp Suite, OWASP ZAP, and Snyk
Review code, manage software composition analysis for third-party libraries, and embed security into CI/CD pipelines using Jenkins or Azure DevOps




Investigate security incidents, support SOC operations, and ensure PCI DSS/ISO compliance while educating developers on OWASP Top 10 risks
Requisitos principales 3+ years in software development (Java, .NET, Python, PHP) with transition to application security
Proficiency with SAST/DAST tools (SonarQube, Veracode, Semgrep), WAF configuration, and runtime monitoring (Contrast Security)
Knowledge of secure frameworks (Spring, ASP.NET), Unix systems, and regulated industry standards
problem-solving
team collaboration
effective communication
SAST/DAST tooling (Checkmarx, Burp Suite, OWASP ZAP, Snyk, SonarQube, Veracode, Semgrep)
CI/CD security integration (Jenkins, Azure DevOps, GitHub Actions)
runtime application security (Contrast Security)

📌 Security Application Analyst (Vitoria-Gasteiz)
🏢 Isg Personalmanagement
📍 Vitoria-Gasteiz