Vulnerability Remediation & Patching Engineer

• 1-3 years of experience in cybersecurity, Application Security, Vulnerability Management, or Vulnerability Remediation.

• Hands-on experience in vulnerability remediation and correction.

• Experience performing vulnerability patching, updating components, libraries, dependencies, or versions to resolve security vulnerabilities.

• Experience with vulnerability analysis tools such as:

  • Checkmarx

  • Qualys

  • GitHub Advanced Security

  • Dependabot

  • OWASP Dependency Check

• Knowledge of SAST, DAST, and Vulnerability Management.

• Ability to interpret scan results and drive findings through to resolution, not merely performing analysis or reporting.

• Experience in updating dependencies and applying security patches.

• Knowledge of AWS.

• Experience collaborating with Development, DevOps, Infrastructure, or Cybersecurity teams.

• Ability to validate that a vulnerability has been correctly corrected after applying the corresponding patch or change.

⚠️ Important: We are looking for a profile with hands-on experience in remediation, patching, and correction of vulnerabilities. We are not looking for profiles whose experience is limited exclusively to the scanning, identification, analysis, or reporting of vulnerabilities.

We are looking for a Mid-Level Security Remediation & Patching Engineer to participate in a cybersecurity project within the banking sector, focused on the remediation, patching, and correction of vulnerabilities in Java applications deployed on JBoss platforms and AWS environments.

• Analysis of vulnerabilities detected through SAST, DAST, and Vulnerability Management tools.

• Technical remediation and correction of vulnerabilities, actively participating in the resolution of findings.

• Patching of security vulnerabilities, including updating components, libraries, and dependencies.

• Identification of the cause of vulnerabilities and definition of the appropriate technical solution.

• Correction of vulnerabilities identified through tools such as:

  • Checkmarx

  • Qualys

  • GitHub Advanced Security

  • Dependabot

  • OWASP Dependency Check

• Updating and patching of Java dependencies and JBoss components when necessary to resolve vulnerabilities.

• Technical validation of corrections and verification that vulnerabilities have been correctly remediated.

• Analysis and validation of possible false positives.

• Collaboration with Development, DevOps, Infrastructure, and Cybersecurity teams during the remediation process.

• Monitoring of vulnerability remediation and patching plans, ensuring compliance with security SLAs.

• Documentation of vulnerabilities, actions taken, and remediation evidence.

• Hybrid model: Madrid / Las Tablas (1-2 days on-site per week)

• Stable project within a highly regulated banking environment.