Application Security Engineer en España is listed on Jobeax. Browse 80,000+ vacancies available.
Requirements
What you'll do
Define security requirements and design application architectures following a secure-by-default approach.
Conduct threat modeling, code reviews, and penetration testing on cloud-based web and mobile apps to proactively identify vulnerabilities.
Implement, manage, and automate SAST/DAST/SCA security controls and WAF rules to enforce protection at scale.
Partner with Product teams to ensure robust protection and foster a security-first development culture.
Participate in the investigation, management, and resolution of security alerts.
Collaborate on all core activities and initiatives of the Security Engineering team.
Original Advert
Are you looking for a new challenge?
Fancy helping us shape the future of motor insurance?
Prima could be the place for you.
Since 2015, we've been using our love of data and tech to rethink motor insurance and bring drivers a great experience at a great price. Our story began in Italy, where we've quickly become the number one online motor insurance provider. In fact, we're trusted by over 5 million drivers. And now we're expanding to help millions more drivers in the UK and Spain.
To help fuel that growth, we need a Application Security Engineer to join our SecurityEngineeringTeam.
The Engineering Department is the beating heart of Prima. You'll be joining over 350 engineers across software development, infrastructure, operations and security: fueled by curiosity, experimentation and collaboration, you'll help deliver scalable, impactful solutions that shape the future of insurance.
Excited to make an impact? Here are the details
What we're looking for
Strong knowledge of web/mobile security vulnerabilities, AI security risks, and industry standards (e.g., OWASP Top 10, CWE).
Hands-on experience with threat modeling frameworks (e.g., STRIDE), code reviews, penetration testing, and SAST/DAST/SCA tools.
Proficiency in scripting/programming (e.g., Python, Rust) and experience with CI/CD systems and Infrastructure as Code (e.g., Pulumi).
Availability for on-call shifts to guarantee 24x7 security monitoring and support.
Self-motivated and proactive problem-solvers with strong English communication skills and experience in Agile environments.
Nice-to-have
Practical experience with secure AWS design/implementation and Kubernetes (EKS) security.
Hands-on experience with WAF configurations (e.g., Cloudflare) and EDR, SIEM, or SOAR platforms.
Relevant industry certifications (e.g., OSCP, OSWA/E, BSCP, PWPA/E, eWPT, or similar).
Active involvement in security research, bug bounty programs, or CTF competitions.
Why you'll love it here
🤸 Work Your Way: Enjoy full flexibility - work from home, the office or a mix of both. Plus, work from anywhere for up to 30 days a year.
❗ This is a full remote position and we're considering candidates located in Italy, Spain or UK.
🏁 Grow with us: We may move fast at Prima, but we move together. Get access to learning resources, mentorship and a growth plan tailored to you.
🌈 Thrive and perform: Your best work begins when you feel your best. Enjoy private healthcare, gym discounts, wellbeing programs and mental health support.
Think you're a match?
At Prima, we celebrate uniqueness. If you don't meet every requirement but are passionate about this role, we still want to hear from you. Innovation thrives on diverse perspectives.
Prima is proud to be an equal opportunity employer. Need accommodations during the process? Email us at [email protected]. Let's build the future of insurance, together.
... Conduct continuous, automated security audits of our global SaaS applications to identify misconfigurations and ensure strict adherence to industry-standard security benchmarks and internal best practices. Serve as a strategic security consultant to product and engineering teams, facilitating complex threat modeling sessions ...
Omega CRM Consulting is seeking a CISOC Application Security Engineer to collaborate with a leading pharmaceutical client. The role focuses on implementing and managing Static Application Security Testing (SAST) within the organization, leveraging a strong software development and security background. Responsibilities include ...
... joining us? Take a look at this opportunity Application & Infrastructure Engineer! — 100% Remote ❗ - Fluent English (C1) ️ Position Summary: We are seeking an Application & Infrastructure Engineer responsible for the operation, maintenance, and evolution of a business web application platform. The role combines infrastructure ...
... where your security expertise directly impacts both Docker's platform and the broader container ecosystem. - Meet with security team and key partners across engineering - Gain access to team owned systems, and internal documentation - Complete security awareness training and compliance onboarding - Review application architecture, ...
... the org - stay current with security research, tooling, and threats - and put that knowledge into action Who You Are - 6+ years of experience as a software engineer with a strong interest in security engineering - You've led or heavily contributed to security engineering efforts across applications, infrastructure, or both ...
... effectively - Elastic's complete, cloud-based solutions for search, security, and observability help organizations deliver on the promise of AI. Join the InfoSec - Security Architecture team as a Senior Information Security Infrastructure Engineer , where you'll have the chance to play a key role in protecting our organization's ...
About the role We're looking for a Principal Software Engineer to join Platform Infrastructure - Application Networking and set where Elastic Cloud application networking goes next. This work covers Ingress, security controls, private connectivity, and DNS management - the path every interaction with Elasticsearch, Kibana, ...
... blue-green deployments, or canary releases -Monitor application deployments, troubleshoot runtime issues, and improve deployment reliability -Collaborate with AI engineers, DevOps engineers, platform teams, and product teams -Ensure applications follow cloud security, scalability, and reliability best practices -Maintain documentation ...
... that infrastructure to every enterprise that runs the real economy. Learn more about our vision in our manifesto. Role Overview We are looking for a Cloud Security Engineer to join our team. You will be the single accountable owner for cloud security posture across AWS, Azure, and GCP — bringing the technical depth and ...
... perfil y hablamos. #SpringBoot #Angular #Java #Fullstack #ApplicationEngineer #RabbitMQ #Linux #RemoteJobs #Capitole The employee will adhere to information security policies: - Will have access to confidential information related to Capitole and the project they are working on. - Must comply with the security policies and ...
... care deeply about correctness and performance. As a senior engineer, you will lead technical work across this area. You'll partner with product, design, and engineering to turn hard, ambiguous problems into reliable, performant systems that ship to real security teams. We're a distributed team - we work across time zones ...
... environments are secured, operated, and experienced. The Application Security Architect is a senior individual contributor responsible for bridging application security engineering and enterprise security architecture at JLL. This role designs and owns security architectures for application ecosystems, integrates security into ...
... cloud-based solutions for search, security, and observability help organizations deliver on the promise of AI. SONAR is the adversary research team within Elastic Security. We discover novel adversary behavior through malware reverse engineering, threat hunting, and vulnerability research, turn every discovery into protections ...
About the role SONAR is the adversary research team within Elastic Security. We discover novel adversary behavior through malware reverse engineering, threat hunting, and vulnerability research, turn every discovery into protections that ship to customers, and share our work publicly through Elastic Security Labs. We want ...
... focus on meaningful impact to everything they do. We’re looking for Information Security Engineering Graduates who want to help monitor, detect, and respond to security threats, protecting the systems and data used by millions of customers. You’ll collaborate with experienced Security Engineers while building hands-on expertise ...
... identity drift or third-party access issues - Develop and enhance detection use cases within SIEM and contribute to SOAR automation workflows - Collaborate with engineering and platform teams to implement security guardrails and enforce best practices - Support shift-left security initiatives by integrating security into infrastructure ...
... comes from generating positive impact together while continuously evolving. 🔍 #SEEKINGYOU We are expanding our team and looking for an Application Support Engineer to join a high-impact international project for a European Agency. We are seeking an experienced professional with a strong background in application support ...
... su solicitud de inmediato. Field Application Engineer Then Future Electronics wants to hear from you! We are currently looking to employ a Generalist Field Application Engineer to join our Advanced Engineering team in Madrid. As a Field Application Engineer (FAE) we will expose and train you on the portfolio of the world's ...
... role will provide support to our customers, particularlly those situated in regions where we does not have an established physical presence. The Customer Application Engineer will diagnose and troubleshoot any software-related problems, help our customers install applications and programs, assist them with computer issues ...