Vulnerability Management Engineer (Application Security)
Posted 8 days ago
About Us
Gramian Consultancy is a boutique consultancy specializing in IT professional services and engineering talent solutions. With a strong background in software engineering and leadership, we help companies build high-performing teams by matching them with professionals who truly fit their needs.
Role Overview
Our client is a global technology and digital transformation consultancy delivering enterprise IT operations and cloud management solutions for large international organizations. Their teams help modernize IT infrastructure through automation, observability, and Service Management platforms.
We are looking for a mid-level Vulnerability Management Engineer with experience in Application Security, vulnerability assessment, and security remediation. In this role, you will help identify, prioritize, and coordinate the remediation of security vulnerabilities throughout the software development lifecycle, working closely with development, DevOps, and security teams to improve the organization's overall security posture.
CONTRACT: Contractor
COMMITMENT: Full-time
LOCATION: Valencia, Spain (Hybrid / Primarily On-site)
PROCESS: 2 Client Interview Process
NOTE: English-speaking environment. Spanish is not needed.
Responsibilities
- Perform application vulnerability assessments across web, mobile, and cloud applications
- Analyze and prioritize security findings based on risk and business impact
- Coordinate remediation activities with development and engineering teams
- Support vulnerability management throughout the Software Development Lifecycle (SDLC)
- Conduct security reviews and validate remediation efforts
- Work with automated vulnerability scanning and security assessment tools
- Track vulnerability metrics and report on remediation progress
- Collaborate with DevOps and infrastructure teams to improve security practices
- Contribute to application security processes, standards, and documentation
- Promote secure development practices across engineering teams
Requirements
- 3+ years of experience in Application Security, Vulnerability Management, or Cybersecurity
- Hands-on experience with vulnerability scanning and security assessment tools
- Strong understanding of OWASP Top 10 and common application security vulnerabilities
- Experience assessing web, mobile, and/or cloud-based applications
- Knowledge of secure software development practices and the SDLC
- Experience prioritizing and coordinating vulnerability remediation
- Familiarity with cloud environments (AWS, Azure, or GCP)
- Experience working in Agile development environments
Preferred Qualifications
- Security certifications such as Security+, CEH, OSCP, CSSLP, or similar
- Experience with SAST, DAST, SCA, or container security tools
- Knowledge of CI/CD security practices and DevSecOps
- Experience performing threat modeling or secure code reviews
- Experience working with enterprise vulnerability management platforms
Other open roles at Gramian Consulting Group(6)
Gramian Consulting is your partner for accessing the engineering capabilities you need—delivered in the model that fits your business, from staff augmentation and talent recruiting to Build-Operate-Transfer (BOT). We combine the perspective of a software engineer, the rigor of a technical recruiter, and the vision of a business builder, so you get experts who understand your challenges and deliver results the right way. This blend is our signature advantage in providing top-quality services, fast and reliably.
Key team members
Emmanuel Yawson
Pauline Perry
Emad Hassan
Aleksandra Šarac
Jobr aggregates jobs directly from company career portals — no middlemen. Our team applies on your behalf with AI-tailored resumes, reviewed by a human before submission.