At Sword Iberia , we are looking for a Vulnerability Management Specialist / DevSecOps Engineer to join a long-term project focused on application security, vulnerability management, and automation within development and deployment pipelines.

We are looking for a professional with experience in SonarQube, Checkmarx, OWASP, CI/CD pipelines, OpenShift, and security automation , who can help development and DevOps teams identify, prioritize, and remediate vulnerabilities throughout the software development lifecycle.

- At least 3 years of experience in software security, vulnerability management, DevSecOps, or a related field.
- Experience with application security tools such as SonarQube, Checkmarx, OWASP ZAP, and Dependabot .
- Knowledge of SAST, DAST, and SCA techniques for identifying and assessing security vulnerabilities.
- Experience managing software dependencies and vulnerabilities across ecosystems such as npm, Maven, pip, NuGet, or Go modules .
- Experience with CI/CD pipelines and automating vulnerability detection, dependency updates, and remediation workflows.
- Knowledge of Python and/or Bash scripting for security automation.




- Experience with OpenShift and Docker , including container security practices.
- Knowledge of OWASP Top 10, CWE, and CVSS vulnerability scoring.
- Familiarity with Git, GitHub, and Jira.
- Analytical mindset, problem-solving skills, and the ability to collaborate with development, DevOps, and security teams.

Nice to Have

- Experience with cloud security principles across AWS, Azure, or GCP .
- Knowledge of vulnerability management platforms such as Tenable, Qualys, or Rapid7 .
- Familiarity with security standards and compliance frameworks such as ISO 27001, NIST, GDPR, or SOC 2 .
- Certifications such as CISSP, OSCP, CEH, or CCSP .

What we offer

- Permanent contract.
- Stable, long-term project.
- Remote work, with occasional visits to the office in Barcelona .
- A strong technical and collaborative environment.

If you are passionate about DevSecOps, application security, and automation , and want to help build more secure software delivery pipelines, we'd love to hear from you

#J-18808-Ljbffr

📌 Vulnerability Management Specialist (Cataluña)
🏢 Sword Iberia
📍 Cataluña