Application Security (AppSec) Engineer | Media International Project

Decskill was founded in 2014 as an IT Consulting Company and their main mission is to delivery value through the knowledge. We enable companies to meet the chalenges of digital world by providing our clients with business models that ensure technological capacity, flexibility and agility. We are more than 700 consultants with offices in Lisbon, Porto and Madrid. Our practice results in the creation of value for our customers, either by delivering qualified and value-added services, or through highly qualified and motivated professionals, as well as technology solutions that allow us to operate and transform the business of our customers. We are looking for an Application Security Engineer to strengthen our security posture across the software development lifecycle. You will work closely with development, DevOps, and product teams to identify, mitigate, and prevent security vulnerabilities in our applications and infrastructure. Be part of an exacting media project. ✅ Responsabilities : Conduct security assessments of web and mobile applications. Perform code reviews, threat modeling, and penetration testing. Build and maintain secure coding guidelines and best practices. Collaborate with developers to remediate vulnerabilities effectively. Automate security checks in CI/CD pipelines (DevSecOps practices). Monitor and respond to application security incidents. Stay updated on the latest security threats, tools, and practices. ✅ Requirements : 5 years of experience in Application Security, AppSec, or related role. Strong knowledge of web and mobile application security principles (OWASP Top 10, CWE, SANS). Hands-on experience with static/dynamic code analysis and penetration testing tools. Familiarity with secure software development practices (SDLC). Experience with CI/CD environments and integrating security tools. Solid knowledge of authentication, authorization, and encryption mechanisms. Strong scripting skills (Python, Bash, or similar). Experience with cloud security (AWS, GCP, or Azure) and Background in container security (Docker, Kubernetes), is a PLUS. High level of English (C1). ✅ Conditions : Hybrid working (2 or 3 days/week in remote). Stable and International project. Contract type : Employment contract and Freelance also considered. Location: Málaga or Madrid. Starting in November. If you're interested in Taking on new international challenges. Continuing to learn and grow your skills. Joining a talented team. ⚖️ Enjoying a healthy work-life balance. Interested??. Join us and grow with our talent !

Location: Andalusia, ES

Posted Date: 9/14/2025