Security Engineer at Air Apps
Spain
Posted
on-site · full_time · Visa sponsorship
Apply for this role at Air Apps
Responsibilities:
- Create and maintain threat models to uncover application and infrastructure risks.
- Conduct vulnerability scanning and penetration testing; prioritize and track remediation.
- Promote and enforce secure coding standards and OWASP best practices with developers.
- Embed security testing into CI/CD pipelines and automate security checks where possible.
- Monitor security telemetry, investigate alerts, and lead incident response and RCA activities.
- Design and maintain IAM, encryption, and authentication controls.
- Perform security reviews for APIs, services, and third-party integrations; document findings.
- Maintain security policies, runbooks, and compliance-related evidence (GDPR, ISO 27001, SOC 2).
Requirements:
- ~4+ years of experience in cybersecurity, application security, or security engineering.
- Strong knowledge of OWASP Top 10, threat modeling, and secure design principles.
- Experience with vulnerability scanners and pen-testing tools (Nessus, Qualys, Burp Suite, etc.).
- Familiarity with SIEM, IDS/IPS, and security monitoring practices.
- Scripting and automation skills (Python, Bash, PowerShell) for tooling and tests.
- Practical cloud security experience (AWS/Azure/GCP) and IAM implementations.
- Experience with incident response and security assessment workflows.