Vulnerability Management Expert

On-site in Barcelona·Full-time·Added 2 days ago

Pasiona

34 open roles

Apply

Overview

Job details

Permanent contract
Full-time hours.

Requirements

Have the right to work in Spain
No sponsorship mentioned, and this kind of work is rarely sponsored in Spain.
Work in English
English is required, per the ad.
Work on-site in Barcelona
No relocation package mentioned.
Have 3+ years of experience
Mid-level role.

Requirements

Nice to have

Familiarity with cloud security principles (AWS, Azure, GCP) and container security practices.
Professional certifications such as CISSP, OSCP, CEH, or CCSP.
Experience with vulnerability management platforms (Tenable, Qualys, Rapid7) and compliance standards.

Languages

English is a must

The role

What you'll do

Regularly monitor, triage, and prioritize vulnerabilities in third-party dependencies, libraries, and frameworks.
Analyze security findings from SAST, DAST, and SCA tools (such as SonarQube, Checkmarx, OWASP ZAP, and Dependabot).
Implement and automate processes for dependency updates, vulnerability detection, and remediation within CI/CD pipelines and container environments (like OpenShift).
Document vulnerability assessments, remediation activities, and compliance evidence using tools like Jira and vulnerability management platforms.
Develop and enforce secure coding guidelines, dependency management standards, and best practices.
Report on vulnerability status, remediation progress, and risk trends to stakeholders and security leadership.
Support incident response related to critical vulnerabilities, including zero-day exploits and high-severity CVEs.
Ensure adherence to internal policies and external regulations (such as ISO 27001, NIST, GDPR, and SOC 2).

Requisitos mínimos

Familiarity with cloud security principles (AWS, Azure, GCP) and container security practices.
Professional certifications such as CISSP, OSCP, CEH, or CCSP.
Experience with vulnerability management platforms (Tenable, Qualys, Rapid7) and compliance standards.
Experience: Minimum of 3 years of expertise in software security, vulnerability management, or related fields.
Tools & Technologies
- Vulnerability detection and management tools (SAST, DAST, SCA such as SonarQube, Checkmarx, OWASP ZAP, and Dependabot).
- Dependency management across multiple ecosystems (npm, Maven, pip, NuGet, or Go modules).
- Container orchestration and security (OpenShift and Docker).
- Version control systems (Git, GitHub) and issue tracking tools (Jira).
Skills & Knowledge
- Proficiency in scripting and automation (Python, Bash) for integrating security processes into CI/CD workflows.
- Deep understanding of vulnerabilities (OWASP Top 10, CWE) and CVSS scoring methodology.
- Experience implementing security best practices within DevOps pipelines and cloud environments.
- Strong analytical and problem-solving skills.

Ubicación

Barcelona

About Pasiona

Pasiona is a technology consulting firm specializing in cybersecurity, cloud infrastructure, and digital transformation. The company operates as a strategic partner for enterprises, offering services that range from vulnerability management and penetration testing to AI-driven platform engineering and data integration. With a global footprint, Pasiona combines deep technical expertise with a strong focus on innovation, helping organizations modernize their IT environments and secure their digital assets.

In Spain, Pasiona has established a significant presence in Barcelona, where it runs its Spanish operations and serves as a hub for international talent. The company is known for its collaborative, engineering-driven culture and actively recruits international professionals, offering opportunities for growth in areas like AI, cloud security, and platform engineering. For international hires, Pasiona provides a multicultural environment and the chance to work on cutting-edge projects, making it an attractive destination for those looking to build a career in Spain's thriving tech sector.

Industry: Tech Consulting
Founded: 2010
Employees: 100–500
Headquarters: Barcelona, Spain
In Spain: Barcelona
Website: pasiona.com

Good to know if you are moving

Pasiona is headquartered in Barcelona, so international hires would be joining the company at its global HQ.
The company's working language is English, making it accessible for non-Spanish speakers.
Pasiona offers visa sponsorship and relocation support for international candidates.
The company has a strong focus on professional development and certifications in cybersecurity and cloud technologies.
Barcelona offers a high quality of life, with a strong tech ecosystem and international community.

All open roles at Pasiona