Application Cyber Security Engineer

Are you an engineer enthusiast with a passion for cybersecurity? We have an exciting opportunity for you at Boehringer Ingelheim. We are seeking a Application Security Engineer to join our IT Infrastructure Cyber Security department. This role is based in Sant Cugat, Spain.

Tasks and responsibilities

As member of Cyber Intelligence & Security Operations Center (CISOC) team, the main duties will be:

• Stay current on IT security trends and emerging threats.
• Scan computer networks for security issues, weakness and vulnerabilities.
• Perform application scanning, testing, and vulnerability assessments.
• Collaborate with developers to integrate security measures into the software development lifecycle.
• Conduct risk assessments and help to develop security policies.
• Automate operational processes.
• Understand Boehringer Ingelheim framework and follow defined processes. Ensure compliant documentation requirements and guarantee its production as required according to the SOPs and working instructions.

Requirements 

• Professional 5 years of experience in application security.
• Experience managing Vulnerability Scanner and Intrusion Detection Systems.
• Knowledge of common system exploits, network attacks, web protocols and malware.
• Knowledge of Vulnerability management and common Vulnerabilities affecting web applications.
• Solid understanding of web architecture.
• Understanding of the principals of web security, current threats, attack trends, and working knowledge of security principals such as defense in depth and causes of security events.
• Knowledge of a programming language (Python, PowerShell, Bash…) and/or scripting, Infrastructure as a Code, Terraform, etc.
• Knowledge of Application Security (AppSec), DevSecOps and OWASP framework.
• Analytical thinking, good communication, problem solving, results oriented, agility and teamwork skills.
• Certifications like IDSC, CEH, CompTIA Security+ or ICDS are desired but not mandatory.
• Security certifications like OSCP, OSWE, GPEN, or SOC-200, are desired but not mandatory.
• Experience working in a virtual, international and multicultural environment.
• Experience with security tools and technologies (e.g., SAST, DAST, IAST).

#IamBoehringerIngelheim because…

We are continuously working to design the best experience for you. Here are some examples of how we will take care of you:

• Flexible working conditions
• Life and accident insurance
• Health insurance at a competitive price
• Investment in your learning and development
• Gym membership discounts

If you have read this far, what are you waiting for to apply? We want to know more about you!