The English-language job board for Spain

Vulnerability Management Specialist

Remote from Spain·Added 2 days ago (last checked 4 Nov)

Agency

IT Partner

58 open roles

Apply

Our summary

Salary: €54,000 a year
About €3,160 a month after tax.
Work mode: Remote from Spain
English: Required
Experience: 5+ years

Visa options

The ad doesn’t mention sponsorship
No sponsorship mentioned, and this kind of work is rarely sponsored in Spain.
Pay clears the EU Blue Card threshold
The advertised pay is over the €41,356 bar, so the route exists if IT Partner uses it.

More jobs over the Blue Card threshold

Skills

This job advert was originally written in Spanish.

Requirements

What we're looking for

Experience in vulnerability management and application security.
Knowledge of SAST, DAST, and SCA tools: SonarQube, Checkmarx, OWASP ZAP, and Dependabot.
Experience in dependency management in ecosystems such as npm, Maven, pip, NuGet, or Go Modules.
Knowledge of scripting and automation with Python and Bash.
Experience integrating security processes into CI/CD pipelines.
Knowledge of Docker, OpenShift, and container security.
Knowledge of OWASP Top 10, CWE, and CVSS scoring methodology.
Experience with Git, GitHub, and Jira.
Knowledge of security best practices in DevOps and cloud environments.

Nice to have

Experience with vulnerability management platforms such as Tenable, Qualys, or Rapid7.
Knowledge of cloud security in AWS, Azure, or GCP.
Knowledge of compliance standards and frameworks: ISO 27001, NIST, and SOC 2.
Certifications such as CISSP, OSCP, CEH, or CCSP.

The role

We are looking for a Vulnerability Management Specialist with experience in cybersecurity and vulnerability management within software development and DevOps environments.

The selected person will be responsible for identifying, analyzing, prioritizing, and managing security vulnerabilities in applications, dependencies, and third-party components, collaborating closely with the Development, DevOps, and Security teams.

They will participate in the integration and automation of security processes within CI/CD pipelines, ensuring early detection and remediation of vulnerabilities, as well as compliance with established security policies and standards.

What you'll do

Monitor, analyze, and prioritize vulnerabilities in third-party dependencies, libraries, and frameworks.
Review and manage results from SAST, DAST, and SCA security analysis tools.
Manage tools such as SonarQube, Checkmarx, OWASP ZAP, and Dependabot.
Automate dependency update processes, vulnerability detection, and remediation through CI/CD pipelines.
Integrate security controls into container environments, especially Docker and OpenShift.
Apply secure development best practices and dependency management standards.
Document vulnerability assessments, corrective actions, and compliance evidence using Jira and other platforms.
Prepare reports on vulnerability status, risk evolution, and remediation progress.
Provide support for critical vulnerabilities, including Zero-Day vulnerabilities and high-severity CVEs.
Ensure compliance with security standards and frameworks such as ISO 27001, NIST, GDPR, and SOC 2.