€55k - €60k
Blue Card threshold🇬🇧The English-language job board for Spain
92,000+ live jobsVulnerability Management Specialist | DevSecOps
Hybrid in Barcelona·Added 15 days ago (last checked 30 Oct)
COBSER Consulting
20 open roles
Our summary
- Salary
- €35,000 - €40,000 a year
About €2,200 - €2,470 a month after tax.
- Work mode
- Hybrid, Barcelona
- Contract
- Permanent
- English
- Required
- Experience
- 3+ years
Visa options
The ad doesn’t mention sponsorship
No sponsorship mentioned, and this kind of work is rarely sponsored in Spain.
Skills
This job advert was originally written in Spanish.
Requirements
What we're looking for
- +3 years in Vulnerability Management, Application Security, Software Security, or DevSecOps Security.
- Experience with SAST / DAST / SCA tools.
- Solid knowledge of OWASP Top 10, CWE, CVEs, and CVSS.
- Experience integrating security into CI/CD pipelines.
- Automation using Python and/or Bash.
- Experience with Git/GitHub and Jira.
- Knowledge of Docker / OpenShift and container security.
- Advanced level of English.
Nice to have
Plus:
- Experience with Tenable, Qualys, or Rapid7.
- Security knowledge in Azure, AWS, or GCP.
- Experience with ISO 27001, NIST, GDPR, or SOC 2.
- Certifications such as CISSP, OSCP, CEH, or CCSP.
Pay & benefits
What you'll get
- Permanent contract.
- Hybrid modality (Barcelona).
- Salary range: 35,000 - 40,000€ gross/year.
- Annual training plan.
The role
At Cobser Consulting, we are looking for a Vulnerability Management Specialist with at least 3 years of experience to participate in an international cybersecurity program, working on the identification, prioritization, and remediation of vulnerabilities throughout the software development lifecycle.
What you'll do
- Monitor, analyze, and prioritize vulnerabilities in applications, libraries, and dependencies.
- Analyze results from SAST, DAST, and SCA tools: SonarQube, Checkmarx, OWASP ZAP, Dependabot, etc.
- Manage vulnerabilities according to CVSS, CWE, and OWASP Top 10.
- Automate detection and remediation processes within CI/CD pipelines.
- Manage dependency updates in npm, Maven, pip, NuGet, or Go modules environments.
- Work with container environments, especially OpenShift and Docker.
- Collaborate with Development, DevOps, and Security teams to integrate DevSecOps / Secure Coding practices.
- Provide support for critical vulnerabilities, zero-days, and high-severity CVEs.
- Document vulnerabilities, remediations, and compliance evidence in Jira and Vulnerability Management platforms.
More jobs like this
or browse Barcelona·Security·Security·Mid-level·Hybrid·Cybersecurity·Catalonia·Consulting
🇬🇧
🇬🇧
1w ago
Senior Cybersecurity Specialist / Qualys (Vulnerability Management)
Hybrid in Barcelona
€40k - €50k
🇬🇧🇬🇧
🇬🇧
🇬🇧
🇬🇧
Relocation
🇬🇧
US$65
🇬🇧