Senior Application Security Engineer (Spain Only) (Cybersecurity)

Location: Remote, Spain only; listed location: León, Spain

Company

hirify.global develops modern cloud-native SaaS software.

What you will do

• Lead the evolution of the Application Security program and secure SDLC roadmap across engineering teams.
• Establish security-by-design practices, including secure coding standards, threat modeling, and security architecture reviews.
• Optimize GitLab and GitHub security capabilities covering SAST, DAST, dependency scanning, container scanning, secrets detection, and IaC security.
• Embed security controls and risk-based gates into CI/CD pipelines in collaboration with DevOps and Engineering.
• Manage vulnerability triage, prioritization, remediation SLAs, closure tracking, and executive reporting.
• Drive cross-functional AppSec initiatives, security workshops, mentoring, documentation, and communication with technical and non-technical stakeholders.

Requirements

• Minimum 10 years of experience in Application Security, S-SDLC/DevSecOps, Software Engineering, or Security Engineering.
• Experience leading AppSec programs in medium or large organizations with modern SDLC, cloud-native, and SaaS environments.
• Strong knowledge of OWASP Top 10, API security, multi-tenant application security, threat modeling, and security architecture reviews.
• Hands-on experience with CI/CD security, SAST/DAST, SCA, secrets management, container and Kubernetes security, and IaC security; Terraform preferred.
• Ability to understand, read, and review production-grade code and work with modern development frameworks and APIs.
• Strong project management, executive reporting, documentation, business-risk prioritization, communication, and coordination skills.

Nice to have

• Penetration testing, red teaming, or offensive security experience.
• Experience with vulnerability management programs, security automation, and scripting.
• Practical use of AI/ML tools in development or cybersecurity, including ChatGPT, Claude, or GitHub Copilot.
• Specialized experience with GitLab or GitHub Security features.
• CSSLP, CISSP, OSCP, GIAC, Azure, or AWS certifications.

Culture & Benefits

• Remote work options with flexible working hours.
• Private health insurance.
• Flexible benefits plan for tailoring part of the compensation package.
• Annual performance and company-results bonus.
• Inclusive environment that values diverse experiences and perspectives.