Madrid | Remote Advanced English (C1 minimum) Excelia is a multinational consulting, technology, and professional services firm with over 20 years of experience. We serve more than 50 countries across Europe, Latin America, and the United States from our 10 offices. Do you have a solid background in Application Security, experience in international projects, and mastery of advanced tools for verification and testing? At Excelia, we are expanding our team—and we want to meet you! What will you do? * Execute verification tests with a holistic understanding of the organization’s technologies and processes. * Provide technical support and guidance to development teams. * Supervise and mentor mid- to senior-level professionals to ensure delivery quality. * Participate in defining and continuously improving security-related processes within CI/CD environments. * Analyze risks, conduct SDLC assessments, and contribute to threat modeling activities. Requirements More than 5 years of experience in Application Security projects. Experience in CI/CD environments, code repositories, and DevSecOps practices. Proficiency in penetration testing and scanning techniques and tools. **Advanced knowledge of tools:** SAST, DAST, SCA/SBOM, CWPP, WAF. **Mastery of standards and frameworks:** * OWASP (ASVS, WSTG, Top 10) * ISO 20000, ISO 27001, ISO 25999/2 * SANS CIS TOP 20, CSA, NIST * LOPD, GDPR, SOX, PCI-DSS Advanced English (C1). University degree. ⭐ We especially value * Experience in large organizations and multinational projects. * Ability to lead, document, and ensure quality across the entire verification process. * Analytical mindset and commitment to continuous improvement. What do we offer? * Participation in challenging projects within an international environment. * A highly specialized security team. * Continuous professional development. If you’re seeking a senior role where you can apply your expertise and continue growing in a dynamic, specialized environment—we want to talk to you! Apply here or send me your CV via direct message.