Vulnerability Management Specialist

PasionaBarcelonaJob.bopublished 11/03/2026
Must-have:PythonGitAWSAzureGoogle CloudDockerCloudDevOpsCI/CD
Machine translation — original language: Spanish.Show original

Job Description / Functions

We are looking for a Vulnerability Management Specialist focused on identifying, analyzing, prioritizing, and mitigating vulnerabilities in applications, dependencies, and software components, collaborating closely with development, DevOps, and cybersecurity teams to integrate security best practices throughout the software development life cycle (SDLC).

We are seeking a profile specialized in application security and vulnerability management, with experience in security analysis tools, process automation, and CI/CD environments.

Minimum Requirements

  • Minimum of 3 years of experience in software security, vulnerability management, or related areas.
  • Experience with SAST, DAST, and SCA vulnerability detection and analysis tools.
  • Knowledge and experience with tools such as: SonarQube, Checkmarx, OWASP ZAP, Dependabot.
  • Experience in dependency management across different technological ecosystems: npm, Maven, pip, NuGet, Go Modules.
  • Knowledge of scripting and automation using Python and Bash.
  • Experience integrating security processes and automation into CI/CD pipelines.
  • Knowledge of container orchestration and security in OpenShift and Docker environments.
  • Knowledge of security vulnerabilities, especially OWASP Top 10 and CWE.
  • Knowledge of vulnerability assessment and classification methodologies using CVSS.
  • Experience with version control systems such as Git and GitHub.
  • Knowledge of security best practices in DevOps and cloud environments.

Desirable Requirements

  • Knowledge of cloud security principles on AWS, Azure, and GCP platforms.
  • Experience in container security and protection of deployment environments.
  • Knowledge of vulnerability management platforms such as Tenable, Qualys, or Rapid7.
  • Knowledge of standards and regulatory compliance frameworks such as ISO 27001, NIST, GDPR, and SOC 2.
  • Professional certifications related to cybersecurity, such as: CISSP, OSCP, CEH, CCSP.
  • Experience in continuous security improvement initiatives within the software development life cycle (SDLC).

Languages

Fluent English to work in international environments

Location

Barcelona

Why us?

  • A day off on your birthday to celebrate in style!
  • Improvements in paid leave so you can enjoy your free time to the fullest.
  • Access to medical insurance to take care of your well-being and peace of mind.
  • Extra vacation days per year of seniority, because we believe your time is valuable and you deserve to rest and recharge.

At Pasiona, we are committed to equal opportunity and diversity. We encourage all individuals to apply, regardless of gender, age, disability, sexual orientation, gender identity, ethnic origin, religion, or other personal or social circumstances.

If you are interested in joining a dynamic and passionate team, we look forward to your application!