The English-language job board for Spain

Senior Vulnerability Engineer

Hybrid in Barcelona·Added 5 months ago (last checked 26 Oct)

Agency

Michael Page España

2363 open roles

Apply

Our summary

Work mode: Hybrid, Barcelona
Contract: Permanent
English: Required
Experience: 5+ years

Visa options

The ad doesn’t mention sponsorship
No sponsorship mentioned, and this kind of work is rarely sponsored in Spain.

Find jobs with visa support

Skills

Requirements

What we're looking for

We are looking someone with at least 5-8 years of experience, with a solid foundation in vulnerability management, recent pentesting, automation (Python, Go, or others), and strong communication skills. Working in a small, highly horizontal senior InfoSec team in an international environment (English required) and a hybrid model (1-2 days in the office). The role is highly hands-on and autonomous, focused on managing end-to-end vulnerabilities (identification, analysis, prioritization, and monitoring), executing full internal penetration testing, and automating security processes (scripts, integrations, use of AI) in cloud environments (primarily AWS) and CI/CD (GitHub), collaborating closely with other teams to explain risks and coordinate remediation (incident management is handled by others).

Pay & benefits

What you'll get

Attractive salary package

Hybrid and flexible work model

Chances to extend the partnership

Attractive salary conditions

The role

We are seeking a Senior Security Engineer with focus on Vulnerability Management for a 12 month project (with potential extension) in Barcelona.

What you'll do

Reporting to the Manager of this division, your main responsibilities will be:

Operate the vulnerability management platform and associated processes, including maintaining asset inventories, coordinating validations and retests, supporting detection tuning, delivering metrics and runbooks that empower engineering teams to remediate efficiently, and engaging with product and platform stakeholders to facilitate triage, clarify ownership and coordinate remediation activities;Design and engineer scalable, secure integration patterns and automation for the vulnerability management ecosystem, including APIs, service-account patterns, CI/CD pipelines, data schemas, observability and SLAs; you will build reusable integration components, document interfaces and hand off stable integration artifacts for others to consume;Operate offensive and assessment capabilities, perform vulnerability scanning and testing workflows, and run the bug-bounty / vulnerability disclosure life-cycle (triage, closure and retests);Conduct and evaluate internal penetration tests and red team exercises to validate controls, test detection and response, and produce actionable remediation guidance;Conduct deep technical vulnerability investigations, run threat-modelling sessions, coordinate countermeasure testing to validate mitigation's, and triage and prioritise findings with product and infrastructure teams;Ensure assets forward appropriate telemetry to central detection systems, help define detection rules, and convert intelligence and scan output into meaningful alerts and triage workflows;Act as a cross-team subject matter expert supporting other Security and engineering/product teams with remediation guidance, run-books and best practices.

Hiring process

2 steps2 interviews

CV registration
Consultant contact
With a specialist Michael Page consultant
If they see that your experience and motivations fit the values and needs of a hiring company, they will contact you to start the selection process: they will learn about your expectations, answer your questions and help you prepare for each stage of the process.
Company interview
With a client company
If your application progresses, we will help you prepare for the interview with useful information about the company, its culture and what it looks for in a profile like yours.
Final stage and negotiation · With a client company

The final stages are set by the client company: Michael Page acts as an intermediary, and the interview and decision rest with the hiring company.
Support continues after the contract is signed.
Michael Page cannot support every candidate; registering and keeping your profile up to date opens the door to future processes.

About Michael Page España

Michael Page is a global recruitment consultancy and part of PageGroup, one of the world's leading professional recruitment firms. The company specializes in placing mid-to-senior level professionals across a wide range of sectors, including technology, engineering, finance, sales, and human resources. With a strong presence in Spain, Michael Page operates offices in major cities and offers services such as executive search, temporary staffing, and outsourcing solutions.