At

Sword Iberia , we are looking for a

Vulnerability Management Specialist / DevSecOps Engineer

to join a long-term project focused on application security, vulnerability management, and automation within development and deployment pipelines. We are looking for a professional with experience in

SonarQube, Checkmarx, OWASP, CI/CD pipelines, OpenShift, and security automation , who can help development and DevOps teams identify, prioritize, and remediate vulnerabilities throughout the software development lifecycle. At least

3 years of experience

in software security, vulnerability management, DevSecOps, or a related field. Experience with application security tools such as

SonarQube, Checkmarx, OWASP ZAP, and Dependabot . Knowledge of

SAST, DAST, and SCA

techniques for identifying and assessing security vulnerabilities. Experience managing software dependencies and vulnerabilities across ecosystems such as

npm, Maven, pip, NuGet, or Go modules . Experience with

CI/CD pipelines

and automating vulnerability detection, dependency updates, and remediation workflows. Knowledge of

Python and/or Bash scripting

for security automation.



Experience with

OpenShift and Docker , including container security practices. Knowledge of

OWASP Top 10, CWE, and CVSS

vulnerability scoring. Familiarity with Git, GitHub, and Jira. Analytical mindset, problem-solving skills, and the ability to collaborate with development, DevOps, and security teams. Nice to Have

Experience with cloud security principles across

AWS, Azure, or GCP . Knowledge of vulnerability management platforms such as

Tenable, Qualys, or Rapid7 . Familiarity with security standards and compliance frameworks such as

ISO 27001, NIST, GDPR, or SOC 2 . Certifications such as

CISSP, OSCP, CEH, or CCSP . What we offer

Permanent contract. Stable, long-term project. Remote work, with occasional visits to the office in

Barcelona . A strong technical and collaborative environment. If you are passionate about

DevSecOps, application security, and automation , and want to help build more secure software delivery pipelines, we'd love to hear from you!

#J-18808-Ljbffr

📌 Vulnerability Management Specialist / DevSecOps (Málaga)
🏢 Sword Iberia
📍 Málaga