Colt provides network, voice and data centre services to thousands of businesses around the world, allowing them to focus on delivering their business goals instead of the underlying infrastructure.
We are looking for a Security Architect specialising in Application Security and DevSecOps to join the Security and Resilience – Security Architecture team.
This role will act as a subject matter expert for secure software development and DevSecOps practices, supporting the integration of security controls into Colt’s development pipelines and ensuring applications are secure by design and by default.
The successful candidate will work closely with Engineering, DevOps, Cloud, SOC and Risk teams to embed security throughout the software development lifecycle, ensuring that Colt’s applications and services are designed, built and tested with security as a core requirement.
Secure software development practices across Colt
Security integration into CI/CD pipelines (GitLab)
Reduction of vulnerabilities through automated scanning and testing
Assurance of internet-facing applications through structured penetration testing activities
Provide security architecture expertise for application security and DevSecOps, supporting standards and best practices across the software development lifecycle
Contribute to the target architecture for secure software development, aligned to Colt’s Secure by Design principles
Support the integration of security controls into CI/CD pipelines (GitLab), including automated testing and policy enforcement




Design and implement application security controls, including:

Static Application Security Testing (SAST)
Dynamic Application Security Testing (DAST)
Software Composition Analysis (SCA) / dependency scanning
Work with engineering teams to ensure consistent adoption of DevSecOps practices and secure coding approaches
Identify and help reduce risks related to application vulnerabilities, insecure coding practices and exposed credentials
Support the coordination and execution of third‑party penetration testing of Colt’s internet‑facing applications
Assist in defining test scope, tracking execution and ensuring remediation of findings is properly managed
Contribute to the development and maintenance of secure coding standards and architectural patterns
Ensure alignment with regulatory requirements such as TSA, DORA and ISO27001 in application design and deployment
Maintain awareness of emerging risks and technologies, including basic AI/LLM‑related application risks, and support translation into practical controls where required
5+ years of experience in information security, with a strong focus on application security and DevSecOps




~ Strong understanding of secure software development practices and common application security risks (e.g. GitLab pipelines)
~ Experience with application security testing tools and practices, including: Experience supporting or participating in penetration testing activities, including remediation tracking

~ APIs, microservices, cloud‑native applications)
~ Experience with GitLab security tooling and pipeline integrations
Familiarity with cloud‑native application security (Azure / GCP environments)
Exposure to API security controls and testing approaches
Basic understanding of AI/LLM application risks, such as prompt injection or data exposure
Our global teams are full of ambitious, driven people, all working together towards one shared purpose: to put the power of the digital universe in the hands of our customers wherever, whenever and however they want.
We give our people the opportunity to inspire and lead teams, and work on projects that connect people, cities, businesses, and ideas. Signed the UN Women Empowerment Principles which guide our Gender Action Plan
Flexible working hours and the option to work from home.
Global Family Leave Policy.
Internal inclusion & diversity employee networks.
A integral network
~ When you join Colt you become part of our global network. We are proud of our colleagues and the stories and experience they bring – take a look at ‘Our People’ site including our Empowered Women in Tech.

#

📌 Security Architect - DevSecOps + Application Security (Barcelona)
🏢 Colt Technology Services
📍 Barcelona