Application Security Specialist (AppSec)

We at Hack in Hire, are looking for a Application Security Specialist (AppSec) to become part of our client's team.

Our client is a Spanish cybersecurity company based in Madrid. They are looking for an Application Security Specialist to join a project focused on rolling out and evolving secure development practices (SSDLC). The role is remote from Spain, with occasional on-site attendance, preferably in Madrid or Barcelona.

The role

You will work closely with development, architecture and security teams, helping to build security into the whole software lifecycle. We are looking for a technical profile who can analyze security problems, propose workable solutions and pass good practices on to development teams. This is not a role focused only on finding vulnerabilities, but on preventing them from the design and development stages.

Responsibilities

• Define, maintain and evolve secure development standards, patterns and good practices.
• Advise development teams on applying security controls throughout the SSDLC.
• Carry out security reviews of applications, architectures and technical designs.
• Identify risks related to authentication, authorization, session management, APIs, secrets and dependencies.
• Apply threat modelling methodologies to identify threats in applications and services.
• Analyze recurring vulnerabilities and propose preventive controls to stop them appearing.
• Help define severity, prioritization and treatment criteria for vulnerabilities.
• Support the integration of security controls into development and CI/CD processes.
• Write technical guides, recommendations and reusable security documentation.
• Take part in continuous improvement and automation of secure development practices.

Requirements

• At least 4 years of professional experience, with a minimum of 2 years in Application Security.
• Solid knowledge of OWASP Top 10, OWASP ASVS and secure coding good practices.
• Experience in web application and REST API security.
• Knowledge of authentication, authorization, session management and identity security.
• Experience analyzing and managing application vulnerabilities.
• Knowledge of threat modelling and architecture review.
• Familiarity with SAST, DAST and SCA tools and controls.
• Ability to interpret technical findings and advise development teams on fixing them.
• English at B2 level or higher.

Nice to have

• Experience with AppSec maturity models such as OWASP SAMM.
• Knowledge of software supply chain security.
• Experience in agile development environments and multidisciplinary teams.
• Knowledge of programming languages such as Java, Python, JavaScript or .NET.
• Certifications related to AppSec, DevSecOps or secure development.

Hiring process

1. Initial filter from Hack In Hire
2. Technical interview, where the Client team will assess your technical knowledge and you will have the opportunity to get to know each other.
3. HR interview, where the clients HR team will tell you more about the company and the position.
4. Technical assessment to demonstrate your skills.

📩 Interested? Apply via LinkedIn or submit your CV via hackinhire.com.