Vulnerability Management Engineer

• Experience: More than 5 years of solid track record in application security and/or vulnerability management.

• Education: Professional degree in Systems Engineering, Cybersecurity, Computer Science, or equivalent experience.

• Technical Mastery: Deep understanding of common vulnerability classes (such as the OWASP Top 10) and secure architecture principles.

• Manual Testing: High proficiency in using Burp Suite for manual security testing of web applications and APIs (business logic validation, complex authentication and authorization).

• Industry Tools: Hands-on experience with platforms such as Fortify, Checkmarx, SonarQube, Black Duck, Tenable, and network discovery tools like Nmap.

• Frameworks: Familiarity with NIST standards, MITRE ATT&CK, and CIS benchmarks.

• Code/Scripting: Ability to program or automate using languages such as Python, Java, or .NET.

• Languages: Advanced English level (C1), capable of interacting with global teams and environments.

• Soft Skills: Excellent documentation, communication, and stakeholder management skills.

We especially value if you also have (Desirable)

• Industry professional certifications (such as Security+, SSCP, GWAPT, or being on your way to CISSP or OSCP).

• Experience using the ServiceNow platform for vulnerability or incident tracking.

• Experience in Azure cloud environments and Azure DevOps ecosystems.

• Skill in using Power BI to visualize security metrics for both technical and executive audiences.

• Passion for learning, sharing ideas, and evolving together with the team.

What do we offer you?

• Compensation: Competitive fixed salary commensurate with your top-tier experience.

• Work Modality: Stable schedule from 09:00 to 18:00 at the office of one of our clients in Valencia.

• Challenging Projects: You will work with cutting-edge technologies, protecting complex ecosystems and completely avoiding monotony.

• Initium Culture: An environment based on autonomy, collaboration, and dynamism. A space where your initiative is valued, your impact is recognized, and there is a firm commitment to your growth and constant mentorship.

"At Initium, we don't just develop technology: we create an environment where people can grow, add value, and leave their mark."

Are you ready for the challenge? If you are looking for a place where your knowledge has real impact and your curiosity is the driving force to protect critical systems, let's talk about the future you can build with us.

Apply now and let's talk

Are you the Security Guardian who will protect the future of elite software?

Location: Valencia (On-site) Schedule: 09:00 - 18:00

We are not looking for someone who just runs automated reports; we are looking for an engineer with deep technical curiosity, ready to take control of the security posture of our web, mobile, and cloud applications. At Initium Software, your mission will be to identify, manage, and remediate vulnerabilities throughout the entire software development lifecycle, working side by side with high-performing teams.

Your Challenges and Responsibilities

• Lead Security Assessments: Execute and support vulnerability analyses in applications using SAST, DAST, SCA, and manual code reviews.

• Critical Analysis: Validate scan results, perform false positive analysis, and conduct rigorous follow-up until effective remediation is confirmed through retesting.

• Strategic Prioritization: Classify vulnerabilities based on business impact, criticality, and likelihood of exploitation, using standard methodologies such as CVSS.

• Automation and Integration: Drive the integration of security workflows and scans directly into CI/CD pipelines.

• Metrics and Indicators Management: Develop and maintain dashboards to measure severity distribution, SLA compliance, and mean time to remediation (MTTR).

• Incident Response: Actively participate in responding to high-severity or zero-day vulnerabilities, coordinating mitigation plans.