The Application Security Engineer is responsible for integrating security into the software development lifecycle (SDLC), conducting security testing, and ensuring applications are resilient to cyber threats. They work closely with development teams to identify, remediate, and prevent security vulnerabilities.
We're looking for an Application Security Engineer to join our growing global team in Madrid and help implement, secure, and evolve the digital backbone of our enterprise. This is your chance to make an impact on projects that touch every corner of our organization—while working in a modern environment that values both collaboration and flexibility.
Please kindly note that will be unable to respond to applications between 22 December 2025 and 6 January 2026 (both inclusive) due to limited availability during the holiday season.
Thank you for your understanding.
Creating passion: your responsibilities
* Implement security controls and tools for application security testing (SAST, DAST, IAST)
* Perform vulnerability assessments and penetration testing on applications
* Collaborate with developers to remediate security issues and enforce secure coding practices
* Automate security testing within CI/CD pipelines
* Monitor and respond to application security threats and incidents
* Maintain security documentation, policies, and compliance requirements
* Support in the integration of new applications and technologies including secure configuration
* Assist in developing security awareness programs for development teams
Contributing your strengths: your qualifications
* Bachelor's/Master's in Cybersecurity, Computer Science, or related field
* 3+ years in cybersecurity, preferreably in Application Security Engineer Role
* Following certificates are preferred; CISSP, OSCP as well as Cloud certifications (AWS, Azure, or GCP)
* English is a Must, German and French are a plus
* Understanding of cybersecurity frameworks and standards (ISO 27001, NIST)
* Deep understanding of application security concepts and principles
* Knowledge of application security tools and techniques (e.g., vulnerability scanners, code analysis tools)
* Expertise in secure coding practices and methodologies
* Knowledge of OWASP framework, defensible architectures
Our commitment to you: your benefits
As an internationally successful family business, the Liebherr Group offers you a secure job, a unique variety of tasks and exciting development opportunities. Become part of our strong team today and get to know the Liebherr Group as a reliable partner. Profit from these benefits:
* Attractive salary and social benefits
* Flexible and hybrid working
* Freedom for creative work
* Safe and secure workplace
* Individual development and training opportunities
* Meal voucher
* Life and accident insurance
* Exclusive offer for a premium private health insurance package
* Bonus payments for Christmas and holidays, based on the collective agreement
Please apply only via the online application form, otherwise we cannot consider your application.
Please note that we do not accept applications via recruitment agencies for this position.
Have we awoken your interest? Then we look forward to receiving your online application. If you have any questions, please contact Karoliina Rissanen.
One Passion. Many Opportunities.
The company
Liebherr is a family-run technology company that is not only one of the largest construction machinery manufacturers in the world, but also offers high-quality, user-oriented products and services in many other areas. The Group employs nearly 50,000 people in more than 140 companies on all continents.
Location
Liebherr IT Shared Service Centre Ibérica, S.L.
Madrid
Spain (ES)
Contact
Karoliina Rissanen
[Not translated in selected language]