Security Engineer at Air Apps
Spain
Posted
on-site · full_time · Visa sponsorship
Apply for this role at Air Apps
Responsibilities:
- Perform threat modeling across applications and infrastructure; prioritize risks and mitigation plans.
- Run vulnerability scans and coordinate or execute penetration tests; validate remediation.
- Define and enforce secure coding standards; provide code-review guidance to development teams.
- Integrate security tooling into CI/CD pipelines and automate security tests.
- Monitor security alerts, investigate incidents, perform root-cause analysis and implement fixes.
- Design and maintain IAM policies, encryption standards, and authentication mechanisms.
- Conduct security reviews for APIs, third-party integrations, and new features.
- Maintain compliance evidence and support audits for ISO 27001, GDPR, SOC 2.
Requirements:
- ~4+ years in cybersecurity, application security, or security engineering.
- Strong knowledge of secure coding, OWASP Top 10, and threat-modeling techniques.
- Hands-on experience with vulnerability scanners and pen-testing tools (Nessus, Qualys, Burp Suite).
- Experience with SIEM, IDS/monitoring tools, and incident response workflows.
- Scripting/automation skills (Python, Bash, PowerShell) to build tests and remediation workflows.
- Familiarity with cloud platforms (AWS/Azure/GCP) and cloud security controls.
- Experience integrating security into DevSecOps/CI-CD processes and working toward compliance.