Barcelona
Hybrid
Senior
Full Time
application securitySaaScloud securityAI-driven securitybug bountyAWSAzureKubernetesTerraformNestJS
Requirements
- •3+ years professional experience in Application Security Operations in high-growth SaaS or cloud-native environment
- •Advanced proficiency in securing modern technical stacks including NestJS, Vue.js, and Angular frameworks
- •Hands-on experience with enterprise security tooling such as Snyk, Datadog ASM/AppSec (WAF), Google SecOps, and Crowdstrike
- •Deep architectural understanding of AWS and Azure environments including Kubernetes/Docker container security and Infrastructure as Code (Terraform)
- •Ability to apply AI and LLM technologies to automate security tasks like vulnerability validation or code analysis at scale
- •Expertise in scripting and development with Python, Node.js, Shell for custom security tooling and integrations
- •Comprehensive knowledge of web protocols, OWASP Top 10, and advanced threat frameworks (MITRE ATT&CK, NIST CSF)
- •Proven track record in ethical hacking, CTF competitions, or bug bounty hunting
- •Exceptional cross-functional collaboration skills to communicate complex security risks to technical and non-technical stakeholders
- •Fluency in English
What You'll Do
- •Conduct continuous, automated security audits of global SaaS applications to identify misconfigurations and ensure adherence to security benchmarks and best practices
- •Serve as a strategic security consultant to product and engineering teams, facilitating threat modeling sessions and AppSec reviews during design phase
- •Perform deep-dive, security-focused code reviews and mentor developers on secure coding patterns
- •Architect and manage the end-to-end vulnerability lifecycle, developing automation for triage, reporting, and remediation tracking of security flaws
- •Orchestrate and optimize AI-driven security workflows using LLMs and autonomous agents for vulnerability discovery and validation in CI/CD pipelines
- •Lead 'Shift-Left' initiatives by integrating security checkpoints into automation stack and developing custom security-as-code tools
- •Oversee strategic direction of private and public bug-bounty programs, ensuring engagement and rapid response to findings
- •Coordinate external penetration testing engagements and customer-driven security assessments as primary technical contact
- •Drive technical response to application-level security incidents, conducting root-cause analysis to prevent recurrence
Benefits
- •Virtual onboarding, Hackathon, and opportunities to interact with team and global colleagues on and offsite
- •Work flexibility with hybrid and remote work policies
- •Generous paid time-off policy (varies by location)
- •Lifestyle allowance
- •Culture Crew in every country to coordinate regular employee activities
- •Stock options for every full-time employee
- •Multiple Employee Resource Groups offering safe spaces and advocacy
- •Additional benefits tailored to each country
About ContentSquare
Contentsquare is an AI platform that provides product analytics, customer feedback, digital experience analytics, and monitoring services.
Paris, France
1000 - 5000
Product Analytics