Vulnerability Management Expert

• Minimum 3 years of experience in Vulnerability Management, Application Security, Software Security, DevSecOps, or similar positions.

• Real experience working with SAST, DAST, and SCA tools.

• Experience with tools such as SonarQube, Checkmarx, OWASP ZAP, and Dependabot.

• Knowledge of dependency management in ecosystems such as npm, Maven, pip, NuGet, or Go modules.

• Experience automating security processes within CI/CD pipelines.

• Practical knowledge of Python and/or Bash for scripting and automation.

• Experience with Git, GitHub, and Jira.

• Knowledge of OWASP Top 10, CWE, and CVSS methodology.

• Experience with Docker and/or OpenShift, especially from a security perspective.

• Knowledge of DevSecOps practices and Secure Software Development Lifecycle.

• The initial contract will run until March 7, 2027, with the possibility of joining the permanent staff. In addition, at Adecco

• Autonomous, technical profile oriented toward continuous improvement.

• Ability to work with Development, DevOps, Security teams, and different stakeholders.

• Experience with vulnerability management platforms such as Tenable, Qualys, or Rapid7.

• Knowledge of cloud security in AWS, Azure, or GCP.

• Experience in container security and cloud-native architectures.

• Experience in corporate environments and large-scale projects.

• Knowledge of ISO 27001, NIST, GDPR, and SOC 2.

• Certifications such as CISSP, OSCP, CEH, or CCSP.

• Experience in advanced automation of security processes.

• Knowledge of management and response to critical vulnerabilities and zero-days.

Degree in Computer Engineering, Telecommunications, Cybersecurity, Systems, or similar.

We also value equivalent professional experience in application security, DevSecOps, or vulnerability management.

Spanish and working English

Are you passionate about cybersecurity, vulnerability management, and the automation of security processes?

We are looking for a Vulnerability Management Expert to join the Mythos program, participating in the continuous improvement of the security of applications, dependencies, development pipelines, and deployment environments.

• The selected person will work alongside Development, DevOps, and Security teams to identify, analyze, prioritize, and manage the remediation of vulnerabilities throughout the software lifecycle.

• Monitor, analyze, classify, and prioritize vulnerabilities in third-party dependencies, libraries, and frameworks.

• Analyze results from security tools SAST, DAST, and SCA such as SonarQube, Checkmarx, OWASP ZAP, and Dependabot.

• Define and follow up on remediation plans according to criticality, risk, exploitability, and CVSS.

• Implement and automate detection, update, and vulnerability remediation processes within CI/CD pipelines.

• Work with dependency management systems in ecosystems such as npm, Maven, pip, NuGet, and Go modules.

• Develop scripts and automations using Python and Bash.

• Integrate security best practices into DevOps processes and container environments such as Docker and OpenShift.

• Manage and document vulnerabilities, remediation actions, and compliance evidence using tools like Jira.

• Define and apply secure coding standards, dependency management, and security best practices.

• Prepare reports on the status of vulnerabilities, evolution of remediations, risks, and trends.

• Collaborate in the response to critical vulnerabilities, high-severity CVEs, and zero-days.

• Work with development teams to integrate security practices within the software lifecycle.

• Contribute to compliance with standards and regulations such as ISO 27001, NIST, GDPR, and SOC 2.

• Help to continuously improve and automate Vulnerability Management and DevSecOps processes.

Barcelona