Security Automation Engineer (AppSec / DevSecOps Tooling)

We at Hack in Hire, are looking for a Security Automation Engineer (AppSec / DevSecOps Tooling) to become part of our client's team.

Our client is a Spanish cybersecurity company based in Madrid. They are looking for a Security Automation Engineer to join a project focused on operating, integrating and improving software development security tools. The role is remote from Spain, with occasional on-site attendance, preferably in Madrid or Barcelona.

The role

You will manage and optimize security analysis platforms, helping development teams interpret results, resolve issues and improve the coverage of automated controls. The tech stack includes Wiz Code and HCL AppScan, so we are looking for hands-on experience with application security analysis tools and the ability to adapt to different platforms. This is not necessarily a senior role: we want someone with a strong technical base, experience with AppSec tools and the drive to automate and improve processes.

Responsibilities

• Administer, configure and maintain application security analysis tools.
• Operate and evolve the Wiz Code and HCL AppScan platforms.
• Onboard new applications and repositories onto the analysis platforms.
• Configure SAST, DAST and other automated security scans.
• Maintain the integrations between AppSec tools, repositories and CI/CD pipelines.
• Analyze scan results, identifying possible false positives.
• Tune rules, policies and configurations to improve result quality.
• Handle incidents and provide technical support to development teams.
• Monitor the coverage and correct operation of security controls.
• Automate tasks through scripts, APIs and integrations.
• Write technical documentation, operating procedures and tool usage guides.

Requirements

• At least 2 years of professional experience, with a minimum of 1 year in AppSec, DevSecOps or security analysis tools.
• Hands-on experience using or administering SAST, DAST or SCA tools.
• Knowledge of tools such as Wiz Code, HCL AppScan, Fortify, Checkmarx, Veracode, Snyk, SonarQube or equivalents.
• Familiarity with Git repositories and CI/CD pipelines.
• Knowledge of REST APIs and script-based automation.
• Ability to interpret vulnerabilities and automated analysis results.
• Basic knowledge of web application security and OWASP Top 10.
• English at B2 level or higher.

Nice to have

• Specific experience with Wiz Code or HCL AppScan.
• Experience configuring analysis rules and policies.
• Knowledge of false positive management and scan optimization.
• Experience working with development teams.
• Knowledge of Python or Bash.
• Experience integrating tools through APIs.
• Certifications related to AppSec or DevSecOps.

Hiring process

1. Initial filter from Hack In Hire
2. Technical interview, where the Client team will assess your technical knowledge and you will have the opportunity to get to know each other.
3. HR interview, where the clients HR team will tell you more about the company and the position.
4. Technical assessment to demonstrate your skills.

📩 Interested? Apply via LinkedIn or submit your CV via hackinhire.com.