Descripción del trabajoExperteer Overview In this role you will advance automated, scalable DevSecOps within a large organization by embedding security into the SDLC. You’ll work in an Application Security and SSDLC team to evolve security controls from early development stages. You’ll automate SAST/SCA in CI/CD, tune rules, and support remediation with developers. The position offers a hands‑on, collaborative environment focused on continuous improvement of security processes and credentials management, with a clear impact on product security.Compensaciones / BeneficiosAutomate and integrate SAST/SCA controls into CI/CD pipelinesConfigure, administer, and optimize security tools and onboard applications to DevSecOpsDefine and maintain Security Gates and scanning strategiesAnalyze vulnerabilities, manage false positives, and tune detection rulesDevelop automation and integrations using APIs and scriptingTroubleshoot issues across security tools, pipelines,



and integrationsSupport developers with vulnerability remediation and revalidationContribute to ongoing improvement of SSDLC controls and secure credential managementResponsabilidadesPractical experience in Application Security and DevSecOps with SAST/SCA in CI/CD environmentsKnowledge of CI/CD, Git, and code repositoriesUnderstanding of OWASP Top 10, CWE, CVE, and CVSS; vulnerability and falsepositive analysisSecure development and SSDLC with automated controls and Security GatesAPIs and scripting experience (Python, PowerShell, or Bash)Tool and pipeline integration and troubleshootingSecure management of credentials, tokens, and secretsAbility to analyze code and collaborate with development teamsRequisitos principaleshybrid working modelteleworking 8 weeks/yearflexible start/finish timescareer plan development and trainingnational and international mobilityrelocation package available#J-18808-Ljbffr

📌 Cybersecurity Engineer (Madrid)
🏢 GMV
📍 Madrid