Descripción del puesto / Funciones

- Regularly monitor, triage, and prioritize vulnerabilities in third-party dependencies, libraries, and frameworks.
- Analyze security findings from SAST, DAST, and SCA tools (such as SonarQube, Checkmarx, OWASP ZAP, and Dependabot).
- Implement and automate processes for dependency updates, vulnerability detection, and remediation within CI/CD pipelines and container environments (like OpenShift).
- Document vulnerability assessments, remediation activities, and compliance evidence using tools like Jira and vulnerability management platforms.
- Develop and enforce secure coding guidelines, dependency management standards, and best practices.
- Report on vulnerability status, remediation progress, and risk trends to stakeholders and security leadership.




- Support incident response related to critical vulnerabilities, including zero-day exploits and high-severity CVEs.
- Ensure adherence to internal policies and external regulations (such as ISO 27001, NIST, GDPR, and SOC 2).

Requisitos mínimos

- Familiarity with cloud security principles (AWS, Azure, GCP) and container security practices.
- Professional certifications such as CISSP, OSCP, CEH, or CCSP.
- Experience with vulnerability management platforms (Tenable, Qualys, Rapid7) and compliance standards.
- Experience: Minimum of 3 years of expertise]]>

📌 Vulnerability Management Expert (Barcelona)
🏢 Pasiona
📍 Barcelona