Application Security Engineer | US Market

Hello! ?

Haven’t heard of hiberus yet? We are a technology company built around one key differentiator: HYPERSPECIALIZATION.

Being part of hiberus means growth, a passion for technology, a drive for innovation, a versátil and collaborative work environment, teamwork, learning, continuous development, motivation, and the opportunity to take on new challenges... and that’s just the beginning.

We have a team of more than 4,700 professionals, 46 areas of specialization, and 35 development hubs across Spain, Europe, Latin America, the United States, and Africa. We are Spain’s leading privately owned technology company. Over the past four years, we have experienced exponential growth, doubling our business volume year after year. This has helped us establish ourselves as a key player in the Spanish technology ecosystem while remaining competitive with international leaders. We are redefining the global technology landscape! ??

We work hard to transform lives through technology, and we want you to join us as we continue to grow. If you are passionate about IT, enjoy keeping up with the latest technologies, and are looking for a new professional challenge, keep reading because we are looking for you!

? What are we looking for?

We are looking for an Application Security Engineer to join an international project focused on the US market. We need someone with hands-on experience in application security, vulnerability assessment, secure code review, and DevSecOps practices.

The ideal candidate will be able to analyze and validate application security findings, assess their exploitability and business impact, and work closely with development teams to define and implement effective remediation strategies.

This is a hands-on position for professionals who understand application security throughout the software development lifecycle and can help integrate security practices into development workflows. Above all... at hiberus, we believe in good people! ?

? Responsibilities

- Analyze, validate, and prioritize application security findings from different security testing tools.
- Assess vulnerability exploitability,



technical severity, and potential business impact.
- Perform secure code reviews to identify security weaknesses and recommend remediation strategies.
- Provide guidance to development teams on secure coding practices and vulnerability remediation.
- Review proposed fixes and supporting evidence to ensure vulnerabilities are properly addressed.
- Coordinate security testing, validation, and rescanning activities to confirm remediation.
- Support the integration of security tools into CI/CD pipelines, including SAST, DAST, SCA, and secrets scanning.
- Contribute to the implementation and maintenance of security quality gates and application security controls.
- Identify and assess risks related to third-party dependencies and software components.
- Collaborate with Information Security, Development, QA, Infrastructure, and DevOps teams.
- Use AI-enabled tools where appropriate to support vulnerability analysis, prioritization, and remediation activities.
- Document findings, remediation progress, risks, and technical recommendations.

??? Skills and Requirements

- Approximately 3–5 years of relevant experience in Application Security, Product Security, or Software Security roles.
- Hands-on experience with web application and API security testing.
- Strong knowledge of Secure Code Review and secure coding practices.
- Experience identifying, analyzing, prioritizing, and supporting the remediation of application vulnerabilities.
- Knowledge of SAST, DAST, and SCA methodologies and tools.
- Experience with application security tools such as Checkmarx, SonarQube, Snyk, Fortify, OpenGrep, OWASP ZAP, Burp Suite, or equivalent solutions.
- Understanding of OWASP Top 10, common application vulnerabilities, and security testing methodologies.




- Experience with dependency security, secrets detection, and third-party component vulnerabilities.
- Knowledge of SDLC, DevSecOps, and CI/CD security integration.
- Experience working with CI/CD platforms such as Azure DevOps, GitLab CI/CD, GitHub Actions, Jenkins, or equivalent tools.
- Programming experience in at least one language such as Java, .NET, Python, or JavaScript.
- Professional English proficiency for effective communication in an international technical environment.
- Strong analytical, problem-solving, and communication skills.
- Ability to collaborate with development teams and provide practical security recommendations.

Experience using AI tools to support security analysis and remediation is a plus. Relevant certifications such as OSCP, OSWE, GPEN, or eWPTX are also valued.

? Location

This opportunity is open exclusively to candidates based in Colombia and Chile.

? Contract Type

Candidates may choose between a freelance contract or a permanent employment contract directly with hiberus.

? Schedule

Business hours aligned with the Boston time zone.

? What do we offer?

- The opportunity to work on an international project focused on the US market.
- Flexible contracting options: freelance or permanent employment directly with hiberus.
- The opportunity to work with application security, DevSecOps, and secure software development practices.
- Collaboration with multidisciplinary teams and professionals specialized in different technology areas.
- A technical environment where you can contribute directly to strengthening application security and improving development processes.

At hiberus, we are experiencing explosive growth ? and we want you to be part of our team.

Sounds good, right? If you want to learn more, apply now and let’s talk!

Want to know more about us? Follow our hashtags:

#somoshiberus #lascosasocurrenaquí and discover everything we do.

Shall we talk?

www.hiberus.com

#somosHiberus — are you in? ?

#ApplicationSecurity #AppSec #CyberSecurity #DevSecOps #SecureCodeReview #SAST #DAST #SCA #OWASP #ColombiaJobs

📌 Application Security Engineer- Colombia | US Market
🏢 hiberus
📍 Colombia