Middleware and Application Vulnerability Remediation Specialist

• English: English level [Specify Level - e.g., Intermediate, Advanced, Fluent], both written and oral. This will be necessary for communication with international teams and consulting technical documentation.
• Demonstrable experience of at least 2 years in a similar role, focused on security vulnerability remediation.
• Deep knowledge of application security and middleware concepts.
• Hands-on experience with vulnerability scanning tools such as Tenable, Qualys, or Rapid7.
• Familiarity with patch application and security configuration in operating systems (Linux/Windows) and web/application servers (Apache, Nginx, IIS, Tomcat, WebLogic, JBoss, etc.).
• Understanding of system hardening principles and application of security benchmarks (CIS Benchmarks).
• Analytical capacity to evaluate the severity and risk of vulnerabilities (CVSS).
• Excellent communication skills, both verbal and written, in Spanish.
• Ability to work independently and as part of a team.
• Proactivity, attention to detail, and a strong orientation toward problem-solving.
• Fluent English
• Availability to work in a hybrid model in Madrid or Barcelona.

Metrica España, a leader in innovative technological solutions, is looking to add a Middleware and Application Vulnerability Remediation Specialist to its team with at least 2 years of experience.

• Comprehensive Vulnerability Management:
• Exhaustive analysis of results obtained from vulnerability scans performed with market-leading tools such as Tenable, Qualys, and Rapid7.
• Rigorous validation of findings to rule out false positives, ensuring accuracy in middleware and application environments.
• Strategic prioritization of vulnerabilities based on metrics such as severity (CVSS score), ease of exploitation, and potential business impact.
• Effective Remediation Execution:
• Diligent application of critical security patches and updates on middleware platforms and application servers.
• Implementation of system hardening configurations, adhering to corporate security best practices and standards, as well as recognized guides such as CIS Benchmarks.
• Proactive correction of insecure configurations in key components, including, but not limited to:
• Middleware: Web servers such as Apache and IIS, application servers such as WebLogic, and related technologies.
• Integration services and API management platforms.
• Collaboration and Communication:
• Collaborate closely with development, operations, and architecture teams to integrate security into the software development life cycle (SDLC).
• Provide technical guidance and recommendations for vulnerability remediation.
• Document remediation processes and implemented security configurations.
• Continuous Improvement:
• Stay up to date on the latest security threats, vulnerabilities, and trends in the cybersecurity landscape.
• Contribute to the continuous improvement of vulnerability management and remediation processes and tools.