At Sword Iberia, we are looking for a Vulnerability Management Specialist / DevSecOps Engineer to join a long-term project focused on application security, vulnerability management, and automation within development and deployment pipelines. We are looking for a professional with experience in SonarQube, Checkmarx, OWASP, CI/CD pipelines, OpenShift, and security automation, who can help development and DevOps teams identify, prioritize, and remediate vulnerabilities throughout the software development lifecycle.
• At least 3 years of experience in software security, vulnerability management, DevSecOps, or a related field.
• Experience with application security tools such as SonarQube, Checkmarx, OWASP ZAP, and Dependabot.
• Knowledge of SAST, DAST, and SCA techniques for identifying and assessing security vulnerabilities.
• Experience managing software dependencies and vulnerabilities across ecosystems such as npm, Maven, pip, NuGet, or Go modules.
• Experience with CI/CD pipelines and automating vulnerability detection, dependency updates, and remediation workflows.
• Knowledge of Python and/or Bash scripting for security automation.
• Experience with OpenShift and Docker,



including container security practices.
• Knowledge of OWASP Top 10, CWE, and CVSS vulnerability scoring.
• Familiarity with Git, GitHub, and Jira.
• Fluent in English and French, both spoken and written.
• Analytical mindset, problem-solving skills, and the ability to collaborate with development, DevOps, and security teams. Nice to Have
• Experience with cloud security principles across AWS, Azure, or GCP.
• Knowledge of vulnerability management platforms such as Tenable, Qualys, or Rapid7.
• Familiarity with security standards and compliance frameworks such as ISO 27001, NIST, GDPR, or SOC 2.
• Certifications such as CISSP, OSCP, CEH, or CCSP.

What we offer
• Permanent contract.
• Stable, long-term project.
• Remote work, with occasional visits to the office in Barcelona.
• Versátil

working hours
.
• A strong technical and collaborative environment. If you are passionate about DevSecOps, application security, and automation, and want to help build more secure software delivery pipelines, we'd love to hear from you Join us at Sword Iberia. Apply now

📌 Vulnerability Management Specialist (Barcelona)
🏢 Sword Iberia
📍 Barcelona