In this role you will strengthen the security of Contentsquare’s global Saa S products. You will partner with product and engineering teams to embed robust security practices across design, development, and deployment. You will lead threat modeling, secure-code reviews, and vulnerability management to prevent and mitigate risks. You will leverage automation and AI to scale security workflows within CI/CD and champion security-as-code. This position offers impact at scale within a security-first culture that values collaboration and continuous improvement. Hybrid/remote work policies Generous paid time-off Stock options Employee Resource Groups Hackathon and virtual onboarding Run continuous automated security audits of integral Saa S applications to detect misconfigurations and enforce benchmarks Act as security advisor to product and engineering teams, guiding threat modeling and App Sec reviews during design Lead in-depth secure coding reviews and mentor developers on secure patterns Architect and manage end-to-end vulnerability lifecycle across cloud and app layers with automation Implement AI-driven security workflows to automate vulnerability discovery and validation in CI/CD Drive shift-left initiatives by adding security checks to the automation stack and creating security-as-code tools Oversee private and public bug-bounty programs and coordinate with researchers for high-quality engagement Coordinate external penetration testing and customer security assessments as primary technical contact Respond to application-layer security incidents with root-cause analysis and defensive improvements 3+ years in Application Security Operations in a high-growth Saa S or cloud-native environment Proficiency with Nest JS, Vue.Js, and Angular Experience with Snyk, Datadog ASM/App Sec (WAF), Google Sec Ops, and Crowdstrike Strong understanding of AWS and Azure, Kubernetes/Docker security, and Terraform Ia C Ability to apply AI/LLM tech to automate security tasks Scripting experience (Python, Node.Js, Shell) for building security tooling Knowledge of web protocols, OWASP Top 10, MITRE ATT&CK, and NIST CSF Experience in ethical hacking, CTFs, or bug bounty Excellent cross-functional collaboration and ability to explain risks to non-technical stakeholders Fluency in English communication analytical rigor App Sec Threat modeling Secure coding Application Security Engineer - barcelona barcelona, catalunya, es #J-18808-Ljbffr

📌 Application Security Engineer - Barcelona
🏢 Contentsquare
📍 Barcelona