**General Information** ----------------------- **Security Dev** **Any BL Spain office**, **SPAIN** **Remote work**: according to Berger-Levrault Spain's policy **Contract type**: permanent contract **Working hours**: full-time **BERGER-LEVRAULT: YOUR FUTURE IS WITH US** Berger-Levrault is an international software company headquartered in France, serving local governments, healthcare centers, the education sector, and industry. The Group has offices in Europe, Morocco, and Canada and serves 40,000 customers across five continents. Berger-Levrault is the leading provider of management solutions for Financial Management and Human Resources Management in the public sector in France and Spain, as well as the European leader in maintenance management solutions. Berger-Levrault is a strong and lasting local partner, working alongside its customers and partners to make the world simpler and more reliable through a secure and accessible digital environment for everyone. Committed to responsible digital transformation, Berger-Levrault’s 2,000 employees work daily to address their clients’ social, economic, and environmental challenges by creating trusted digital solutions. https://www.berger-levrault.com Curious to learn more about us? Click here. **WHAT WILL YOUR RESPONSIBILITIES BE?** At Berger-Levrault, we are looking for a **Security Developer** (AppSec) passionate about cybersecurity and eager to grow in an environment where security is part of the development DNA. Your role will be key in integrating security into every phase of the SDLC, helping detect and mitigate vulnerabilities, and contributing to making our applications increasingly secure and resilient. No external auditing here: you’ll be at the heart of the code, collaborating with development, QA, and operations teams to make security flow naturally. What you’ll do: * Integrate security best practices throughout the entire development lifecycle. * Identify vulnerabilities in web applications and REST APIs before they become incidents. * Use tools like SonarQube, OWASP ZAP, or Burp Suite to ensure code is as solid as it is elegant. * Collaborate with DevOps and CI/CD teams to automate security checks. * Learn, share, and propose new ideas: curiosity is welcome here. **WHAT ARE WE LOOKING FOR?** * Basic knowledge of security in web applications and REST APIs. * Familiarity with OWASP Top 10 and common vulnerabilities (XSS, SQLi, CSRF, SSRF…). * Understanding of how HTTPS, JWT, OAuth2, and access controls work. * 1-2 years of experience in development (Java, .NET, Node.js, or similar). * Ability to navigate Git and CI/CD environments. * Attention to detail and analytical mindset. Bonus points if you also… * Hold certifications such as eJPT, CompTIA Security+, or similar. * Have experience with Docker, Kubernetes, or cloud environments (AWS, Azure, GCP). * Are familiar with DevSecOps and want to apply it seriously. * Have contributed to open-source projects, maintain a security blog, or have an active profile on Hack The Box / TryHackMe. **WHAT’S YOUR FUTURE TEAM LIKE?** You’ll join **Santiago Duque’s** team, a group of people passionate about security, innovation, and continuous learning. You’ll find genuine collaboration, enthusiasm for sharing knowledge, and space to experiment, make mistakes, and improve. Santiago and his team believe in collective growth, clean code, and humor as essential parts of everyday life. **WHAT WE OFFER WILL AMAZE YOU…** Your working schedule * Remote work? Of course! Hybrid or 100%, according to Berger-Levrault Spain’s remote work policy. * Flexible hours and digital disconnection policy to ensure optimal work-life balance. * Shortened morning shifts only during the three summer months and at Christmas. * Special hours during Easter week, December 24th, December 31st, and January 5th (from 9 AM to 2 PM). * Possibility to work only 2 out of 5 afternoons per week during winter hours. Personal benefits * 100% salary from the first day of sick leave (first 12 months). * Possibility of salary advance. * Two moving days. * Birthday half-day off. * 22 + 2 vacation days. * Wedding gift bonus on payroll. Family-work balance * 16 weeks + 1 extra week from BL for childbirth and childcare. * Breastfeeding support: 9h/week during winter schedule and 5h/week during summer schedule. * Family plan for children with disabilities. * Leave to attend school parent-teacher meetings. **OUR SELECTION PROCESS:** ✨**A UNIQUE AND TRANSPARENT EXPERIENCE**✨ We know your time is valuable, so we want you to know from the start how we’ll proceed: First screening: Ana Liñán, our HR Specialist, will carefully review your CV to ensure your profile matches what we’re looking for. If so, she’ll contact you to move forward. First interview: You’ll have a technical interview with Santiago Duque (Development Director) and Luis Tubio (Technical Product Owner). It will be a technical conversation about your experience, knowledge, expectations, and how you could fit into the team. Final interview: If you reach this stage, you’ll meet with our HR Director, Manuel Romera. We commit to making the process agile, respectful, and clear. Whatever happens, we’ll keep you informed so you won’t be left wondering. ❤️ **The person managing this recruitment process is** **Ana Liñán****, HR Specialist. And she’s excited to meet you!** **EQUALITY, DIVERSITY, AND INCLUSION: THE KEY TO OUR HUMAN SUCCESS** We commit to: * Designing job offers and conducting selection processes with complete impartiality and non-discrimination based on gender, race, religion, or any other personal or social condition. * Complying with current regulations regarding equal treatment and equal opportunities between women and men in employment and occupation (Royal Decree-Law 6/2019). * Welcoming and integrating people with disabilities. * Promoting a culture of equality and inclusion within the company. * Raising awareness and supporting teams on diversity matters, knowing that each individual’s characteristics enrich us all. **MORE THAN A JOB, AN ADVENTURE**