At Sword Iberia, we are looking for a Vulnerability Management Specialist / DevSecOps Engineer to join a long-term project focused on application security, vulnerability management, and automation within development and deployment pipelines.We are looking for a professional with experience in SonarQube, Checkmarx, OWASP, CI/CD pipelines, OpenShift, and security automation, who can help development and DevOps teams identify, prioritize, and remediate vulnerabilities throughout the software development lifecycle.At least 3 years of experience in software security, vulnerability management, DevSecOps, or a related field.Experience with application security tools such as SonarQube, Checkmarx, OWASP ZAP, and Dependabot .
Knowledge of SAST, DAST, and SCA techniques for identifying and assessing security vulnerabilities.Experience managing software dependencies and vulnerabilities across ecosystems such as npm, Maven, pip, NuGet, or Go modules .
Experience with CI/CD pipelines and automating vulnerability detection, dependency updates,



and remediation workflows.Knowledge of Python and/or Bash scripting for security automation.Experience with OpenShift and Docker, including container security practices.Knowledge of OWASP Top 10, CWE, and CVSS vulnerability scoring.Familiarity with Git, GitHub, and Jira.Analytical mindset, problem-solving skills, and the ability to collaborate with development, DevOps, and security teams.Nice to Have Experience with cloud security principles across AWS, Azure, or GCP .
Knowledge of vulnerability management platforms such as Tenable, Qualys, or Rapid7 .
Familiarity with security standards and compliance frameworks such as ISO *, NIST, GDPR, or SOC 2 .
Certifications such as CISSP, OSCP, CEH, or CCSP .
What we offer Permanent contract.Stable, long-term project.Remote work, with occasional visits to the office in Barcelona .
A strong technical and collaborative environment.If you are passionate about DevSecOps, application security, and automation, and want to help build more secure software delivery pipelines, we'd love to hear from you
#J-*-Ljbffr

📌 Vulnerability Management Specialist (Santiago de Compostela)
🏢 Sword Iberia
📍 Santiago de Compostela