Application Cyber Security Engineer

Are you an engineering enthusiast with a passion for cybersecurity? We have an exciting opportunity for you at Boehringer Ingelheim. We are seeking an Application Security Engineer to join our IT Infrastructure Cyber Security department. This role is based in Sant Cugat, Spain.
Tasks and Responsibilities

As a member of the Cyber Intelligence & Security Operations Center (CISOC) team, the main duties will be:

• Stay current on IT security trends and emerging threats.
• Scan computer networks for security issues, weaknesses, and vulnerabilities.
• Perform application scanning, testing, and vulnerability assessments.
• Collaborate with developers to integrate security measures into the software development lifecycle.
• Conduct risk assessments and help to develop security policies.
• Automate operational processes.
• Understand Boehringer Ingelheim's framework and follow defined processes. Ensure compliant documentation requirements and guarantee its production as required according to the SOPs and working instructions.

Requirements

• Professional 5 years of experience in application security.
• Experience managing Vulnerability Scanner and Intrusion Detection Systems.
• Knowledge of common system exploits, network attacks, web protocols, and malware.
• Knowledge of Vulnerability management and common vulnerabilities affecting web applications.
• Solid understanding of web architecture.
• Understanding of the principles of web security, current threats, attack trends, and working knowledge of security principles such as defense in depth and causes of security events.
• Knowledge of a programming language (Python, PowerShell, Bash...) and/or scripting, Infrastructure as Code, Terraform, etc.
• Knowledge of Application Security (AppSec), DevSecOps, and OWASP framework.
• Analytical thinking, good communication, problem-solving, results-oriented, agility, and teamwork skills.
• Certifications like IDSC, CEH, CompTIA Security+ or ICDS are desired but not mandatory.
• Security certifications like OSCP, OSWE, GPEN, or SOC-200 are desired but not mandatory.
• Experience working in a virtual, international, and multicultural environment.
• Experience with security tools and technologies (e.g., SAST, DAST, IAST).

If you have read this far, what are you waiting for to apply? We want to know more about you!