Required Experience:
- 3+ years in software security, vulnerability management or related fields
- Hands-on use of SonarQube, Checkmarx, OWASP ZAP and Dependabot
- Dependency management across npm, Maven, pip, NuGet or Go modules
- Automation of security workflows in CI/CD pipelines and container platforms
- Fluent English

Preferred Experience:
- Cloud security (AWS, Azure, GCP) and container security practices
- Vulnerability management platforms (Tenable, Qualys, Rapid7)
- Compliance standards (ISO 27001, NIST, GDPR, SOC 2)

Main Responsibilities
- Triage and prioritize vulnerabilities in third-party dependencies, libraries and frameworks
- Analyse SAST, DAST and SCA findings and drive remediation with development teams
- Automate dependency updates, detection and remediation in CI/CD pipelines and OpenShift
- Document assessments and remediation evidence in Jira
- Report vulnerability status, remediation progress and risk trends to stakeholders
- Support incident response on critical vulnerabilities (zero-days, high-severity CVEs)

📌 Vulnerability Management Expert (Barcelona)
🏢 Ubique Systems
📍 Barcelona