🇬🇧
Application Security Consultant
On-site in Madrid·Full-time·Added 2 days ago
Overview
Job details
Full-time hours
Per the ad.
Requirements
Have the right to work in Spain
No sponsorship mentioned, and this kind of work is rarely sponsored in Spain.
Work in English
English is required, per the ad.
Work on-site in Madrid
No relocation package mentioned.
This job was automatically translated to English,.
The role
Accenture, recognized as a Great Place To Work®, is a global professional services company that helps the world's leading businesses, governments, and organizations build their digital core, optimize operations, accelerate growth, and enhance services, creating tangible value at speed and scale.
We are looking for an Application Security Consultant - Application Security (AppSec) to participate in cybersecurity projects for leading companies, helping them identify and prevent vulnerabilities and integrate security into their application development.
What you'll do
As part of the team, you will work alongside Development, Architecture, DevOps, and Cybersecurity specialists to incorporate security best practices and controls throughout the entire software development life cycle (SDLC), from design to production.
- Participate in the security assessment of web applications and APIs, identifying vulnerabilities and proposing recommendations for their correction.
- Execute and analyze results from Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Software Composition Analysis (SCA) tools.
- Review and validate security findings, identifying false positives and prioritizing vulnerabilities according to their criticality and context.
- Collaborate with development teams on vulnerability remediation, providing secure coding recommendations and verifying implemented fixes.
- Participate in code reviews and in the definition of requirements and secure development best practices, using OWASP Top 10 and OWASP ASVS as references.
- Support design reviews and threat modeling, identifying potential security risks from the early stages of development.
- Collaborate in the integration and automation of security controls within CI/CD pipelines, contributing to the adoption of DevSecOps practices.
- Prepare technical documentation and result reports, communicating risks and recommendations to the involved teams.
Requirements
What we're looking for
- At least 1 year of professional experience in application security (AppSec), performing functions such as application vulnerability analysis, code review, analysis of security tool results, or supporting development teams in vulnerability remediation.
- Hands-on experience with SAST, DAST, and/or SCA tools, including the interpretation and validation of their results.
- Knowledge of the main web application and API vulnerabilities, using OWASP Top 10 as a reference, and the measures to prevent and correct them.
- Knowledge of secure development and the software development life cycle (SDLC).
- Ability to understand and review code in at least one programming language, such as Java, JavaScript/TypeScript, Python, or C#.
Nice to have
- Experience with solutions such as Checkmarx, Fortify, Veracode, Snyk, Burp Suite, or ZAP.
- Knowledge of DevSecOps, integration of security controls into CI/CD pipelines, and automation through scripting.
- Experience in threat modeling, design review, or security testing of web applications and APIs.
- English level C1.
- Certifications related to application security, secure development, or offensive security.
The role
Accenture, reconocida como Great Place To Work®, es una compañía global líder en servicios profesionales que ayuda a las principales empresas, gobiernos y organizaciones del mundo a desarrollar su núcleo digital, optimizar sus operaciones, acelerar su crecimiento y mejorar sus servicios, creando valor tangible a gran velocidad y escala.
Buscamos un/a Consultor/a de Seguridad de Aplicaciones - Application Security (AppSec) para participar en proyectos de ciberseguridad para compañías líderes, ayudándolas a identificar y prevenir vulnerabilidades e integrar la seguridad en el desarrollo de sus aplicaciones.
What you'll do
Como parte del equipo, trabajarás junto a especialistas de Desarrollo, Arquitectura, DevOps y Ciberseguridad para incorporar buenas prácticas y controles de seguridad a lo largo de todo el ciclo de vida de desarrollo de software (SDLC), desde el diseño hasta la puesta en producción.
- Participar en la evaluación de seguridad de aplicaciones web y APIs, identificando vulnerabilidades y proponiendo recomendaciones para su corrección.
- Ejecutar y analizar resultados de herramientas de análisis estático de código (SAST), análisis dinámico (DAST) y análisis de componentes y dependencias (SCA).
- Revisar y validar los hallazgos de seguridad, identificando falsos positivos y priorizando las vulnerabilidades según su criticidad y contexto.
- Colaborar con los equipos de desarrollo en la remediación de vulnerabilidades, proporcionando recomendaciones de programación segura y verificando las correcciones implementadas.
- Participar en revisiones de código y en la definición de requisitos y buenas prácticas de desarrollo seguro, tomando como referencia OWASP Top 10 y OWASP ASVS.
- Apoyar las revisiones de diseño y el modelado de amenazas, identificando posibles riesgos de seguridad desde las primeras fases del desarrollo.
- Colaborar en la integración y automatización de controles de seguridad en los pipelines de CI/CD, contribuyendo a la adopción de prácticas DevSecOps.
- Elaborar documentación técnica e informes de resultados, comunicando los riesgos y las recomendaciones a los equipos implicados.
Requirements
What we're looking for
- Al menos 1 año de experiencia profesional en seguridad de aplicaciones (AppSec), realizando funciones como análisis de vulnerabilidades en aplicaciones, revisión de código, análisis de resultados de herramientas de seguridad o apoyo a equipos de desarrollo en la remediación de vulnerabilidades.
- Experiencia práctica con herramientas de SAST, DAST y/o SCA, incluyendo la interpretación y validación de sus resultados.
- Conocimiento de las principales vulnerabilidades de aplicaciones web y APIs, tomando como referencia OWASP Top 10, y de las medidas para prevenirlas y corregirlas.
- Conocimientos de desarrollo seguro y del ciclo de vida de desarrollo de software (SDLC).
- Capacidad para comprender y revisar código en al menos un lenguaje de programación, como Java, JavaScript/TypeScript, Python o C#.
Nice to have
- Experiencia con soluciones como Checkmarx, Fortify, Veracode, Snyk, Burp Suite o ZAP.
- Conocimientos de DevSecOps, integración de controles de seguridad en pipelines de CI/CD y automatización mediante scripting.
- Experiencia en modelado de amenazas, revisión de diseños o pruebas de seguridad de aplicaciones web y APIs.
- Nivel de inglés C1.
- Certificaciones relacionadas con seguridad de aplicaciones, desarrollo seguro o seguridad ofensiva.
Hiring process
2 steps1 interviewa task to do
Solicitud · 15 min
Revisión de la solicitud · With reclutadores
Entrevistas
Te contactan por teléfono o email (Workday) para programar entrevistas por teléfono, videoconferencia o en persona.
Actividad online
Online test · Not every role
Para algunos puestos piden completar una actividad online sobre habilidades técnicas, fortalezas o toma de decisiones.
Oferta
- El tiempo de respuesta depende del puesto y del área; el reclutador es quien puede orientarte.
- Si no te seleccionan, conservan tu información para futuras oportunidades.
About Accenture
Accenture is a global professional services company specializing in information technology services and consulting, with a workforce of over 700,000 people serving clients in more than 120 countries. The company operates across five business areas: Strategy and Consulting, Technology, Operations, Industry X, and Song, offering services that range from digital transformation and AI implementation to SAP integration and cybersecurity. Accenture is recognized as a global leader in consulting and technology services, consistently ranked among the world's largest and most influential firms in its sector.
In Spain, Accenture has a significant presence with offices in Madrid, Barcelona, and other major cities, employing thousands of professionals. The company is a major employer of international talent, offering roles in areas such as SAP consulting, AI engineering, cybersecurity, and digital design. Accenture's work culture emphasizes innovation, continuous learning, and diversity, making it an attractive destination for professionals seeking to advance their careers in a global environment. With a strong focus on emerging technologies like generative AI and agentic AI, Accenture Spain provides ample opportunities for international hires to work on cutting-edge projects.
- Industry
- Consulting
- Founded
- 1989
- Employees
- 500,000+
- Headquarters
- Dublin, Ireland
- In Spain
- Madrid, Barcelona, Bilbao and 4 more
- Website
- accenture.com
Good to know if you are moving
- Accenture Spain has offices in Madrid, Barcelona, and other cities, with a large number of roles in technology and consulting.
- The company offers a global career framework, making it easier for international hires to transfer between countries.
- Accenture is known for its strong focus on learning and development, with extensive training programs and certifications.
- Many roles in Spain are bilingual, requiring both Spanish and English, but some positions are open to English-only speakers.
- Accenture provides visa sponsorship and relocation support for qualified international candidates.
In their own words
About the company & team
Would you like to be part of a team of more than 19,000 cybersecurity specialists worldwide? At Accenture, we have an opportunity for you to join our Cybersecurity team.
Accenture is a leading global professional services company that helps the world's leading businesses, governments and other organizations build their digital core, optimize their operations, accelerate revenue growth and enhance citizen services-creating tangible value at speed and scale. We are a talent- and innovation-led company with approximately 791,000 people serving clients in more than 120 countries. Technology is at the core of change today, and we are one of the world's leaders in helping drive that change, with strong ecosystem relationships. We combine our strength in technology and leadership in cloud, data and AI with unmatched industry experience, functional expertise and global delivery capability. Our broad range of services, solutions and assets across Strategy & Consulting, Technology, Operations, Industry X and Song, together with our culture of shared success and commitment to creating 360° value, enable us to help our clients reinvent and build trusted, lasting relationships. We measure our success by the 360° value we create for our clients, each other, our shareholders, partners and communities.
Visit us atwww.accenture.com
Additional information
We believe that no one should be discriminated against because of their differences. All employment decisions shall be made without regard to age, race, creed, color, religion, sex, national origin, ancestry, disability, military veteran status, sexual orientation, gender identity or expression, genetic information, marital status, citizenship, or any other legally protected status. Our rich diversity makes us more innovative, more competitive, and more creative, which helps us better serve our clients and our communities.
About the company & team
¿Te gustaría formar parte de un equipo de más de 19.000 especialistas en ciberseguridad en todo el mundo? En Accenture tenemos una oportunidad para que te unas a nuestro equipo de Cybersecurity.
Accenture is a leading global professional services company that helps the world's leading businesses, governments and other organizations build their digital core, optimize their operations, accelerate revenue growth and enhance citizen services-creating tangible value at speed and scale. We are a talent- and innovation-led company with approximately 791,000 people serving clients in more than 120 countries. Technology is at the core of change today, and we are one of the world's leaders in helping drive that change, with strong ecosystem relationships. We combine our strength in technology and leadership in cloud, data and AI with unmatched industry experience, functional expertise and global delivery capability. Our broad range of services, solutions and assets across Strategy & Consulting, Technology, Operations, Industry X and Song, together with our culture of shared success and commitment to creating 360° value, enable us to help our clients reinvent and build trusted, lasting relationships. We measure our success by the 360° value we create for our clients, each other, our shareholders, partners and communities.
Visit us atwww.accenture.com
Additional information
Creemos que nadie debe ser discriminado por sus diferencias. Todas las decisiones de empleo se tomarán sin importar la edad, raza, credo, color, religión, sexo, origen nacional, ascendencia, discapacidad, condición de veterano militar, orientación sexual, identidad o expresión de género, información genética, estado civil, ciudadanía ni ningún otro criterio protegido por la legislación aplicable. Nuestra rica diversidad nos hace más innovadores, competitivos y creativos, lo que nos ayuda a servir mejor a nuestros clientes y comunidades.
More jobs like this
or browse Security·Junior·Big 4 & Consulting·Cybersecurity·Community of Madrid·Consulting·Python·Java·JavaScript·TypeScript
🇬🇧
🇬🇧
🇬🇧
🇬🇧
🇬🇧
🇬🇧
🇬🇧
🇬🇧
🇬🇧
🇬🇧
🇬🇧
Visa Sponsor🇬🇧
🇬🇧
€38K - €63K
🇬🇧€40K - €47K
🇬🇧Relocation🇬🇧
🇬🇧
🇬🇧
🇬🇧