{"id":4232829,"url":"https://alion.io/job/sdui-senior-application-security-engineer-2","title":"(Senior) Application Security Engineer","company":{"id":2473806,"name":"Sdui","domain":"sdui.de","url":"https://alion.io/company/sdui-de","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Personio","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Madrid, Spain"],"countries":["ES"],"hiring_countries":["ES"],"hiring_countries_total":1,"salary":null,"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CI/CD","optional":false},{"name":"SBOM","optional":false},{"name":"JavaScript","optional":true},{"name":"LLM","optional":true},{"name":"Python","optional":true}],"status":"live","first_seen_at":"2026-11-13T08:44:09Z","employer_posted_date":"2026-11-13","last_verified_at":"2026-11-13T10:45:18Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Our mission\nSeven Education develops a smart, AI-powered platform that helps schools and educational institutions work more efficiently. Our products reduce administrative workload, improve communication and enable teachers, institutions, and decision-makers to focus on what matters most: learning, growth and people.As a European EdTech group with around 300 employees, we build intuitive and scalable solutions used widely across the education landscape. Every day, they help create clarity, streamline workflows and strengthen collaboration. We build with courage, ownership and meaningful collaboration, and we stay inspired by the real impact our products create for the people at the heart of education. Our ambition is clear: to become Europe's leading EdTech brand.\nIf you want to join that journey and grow with us, we would love to hear from you.\nYour mission\nSeven Education runs seven products on different tech stacks, and none of them has dedicated application security capacity today. As our (Senior) Application Security Engineer, you turn security findings into fixes and set one security baseline across all products. You report directly to our CISO and work closely with the engineering teams who build and run our platform. Schools trust us with the data of children and teachers, and you make sure that trust holds as our products and AI features grow.What you’ll do\nVulnerability management: You run vulnerability management across our seven product estates. You tune the scanners, agree fix deadlines with Engineering, retest once fixes have landed and report on progress.\n\nCutting through the noise: You turn a large and growing volume of scanner findings from different tech stacks into a short list of real, exploitable issues that teams actually fix.\n\nPenetration test triage: You triage penetration test results together with the CISO, assess severity and priority, pass findings on to Engineering and retest once fixes have landed.\n\nAudit evidence: You build automations that collect security evidence for our various audits and keep them running.\n\nPipeline security: You define and tune the security checks in our CI/CD pipelines, including secrets detection, DAST, fuzzing and the SBOM checks that matter for our products.\n\nDesign and feature reviews: You review new features and designs against one group baseline and keep data flow diagrams and the security architecture up to date.\n\nSecurity alerting: You support the CISO in building security alerting, so that we can see security events across our IT systems.\n\nProduction access model: You design the production access model with Engineering and IT and start its rollout.\n\nWhat you’ll bring\nApplication security experience: You have at least five years of experience in application or product security, or in engineering with a security focus, ideally in SaaS, startups or scaleups across different tech stacks and cloud platforms.\nFixes, not just findings: You have a track record of driving security issues from discovery to a verified fix, and you work with engineers to find a workable path instead of blocking their releases.\nCode and automation: You read code across different tech stacks and write scripts and automation, for example in Python or Go or JavaScript.\nSecurity tooling: You are hands on with SAST, DAST, SCA and CI/CD pipeline security.\nClear risk communication: You prioritise clearly, explain risk in plain language and take ownership of your topics with minimal supervision.\nAI-assisted security work: You build AI harnesses and agents that support security work such as vulnerability triage, scanning and analysis of indicators of compromise.\nFluent English: You are fluent in English, which you use daily to work with engineering teams and the CISO. \nNice to have: Cloud security experience on sovereign cloud, penetration testing experience or a certification such as OSCP or OSWE, and an understanding of the security of AI and LLM features.\nWhere you’ll be\nWe work hybrid. Your base is one of our offices in Madrid or Girona, where you are on site several days per week. On the other days you can work flexibly from home. We value time together in person, because good collaboration happens in conversation and not at the desk alone.What we offer\nPurpose & Social Impact: Working in education means making a real difference. At Seven Education, you contribute to improving the daily work of schools and shaping the future of education for a better tomorrow.\nFlexibility & Hybrid Work: We work in a hybrid setup that combines flexibility with collaboration. This includes flexible working hours, the option to work remotely and a regular onsite presence to support teamwork and connection. Working hours are shorter on Fridays.\nWe Take Care of Our People: Your well-being matters to us. In case of sick leave, we cover 100% of your salary from day one.\nLearning & Development: We support your personal and professional growth through development opportunities, learning initiatives and the chance to grow within an international software group.\nTeam & Collaboration: You will be part of a collaborative and supportive team environment. We believe great teams are built through trust, connection and shared experiences, and we actively create space for this in everyday work.\nOwnership & Growth: We combine a start-up mindset with the stability and ambition of a growing European group. You will have the opportunity to take responsibility, contribute your ideas and actively shape our future together.\nTime Off & Everyday Perks: You receive 23 days of paid vacation per year. Coffee, tea and cold drinks are available in our offices, and we value spending time together beyond day-to-day work.\nDiversity Statement\nAt Seven Education, we believe that diversity drives innovation and inclusion strengthens collaboration.We welcome people of all backgrounds, identities, and perspectives, because transforming education for a better tomorrow starts with equal opportunities today. If you're excited about this role but don't meet every requirement, we'd still love to hear from you.\nYour contact\n Maren Besand - Talent Acquisition LeadWe’re excited to get to know you! The best way to apply is directly through our career portal.","description_format":"text","description_chars":6240,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"Advanced (C1)","optional":false}]},"benefits":["Flexible schedule","Hybrid work"],"hiring_locations":[{"name":"Spain","iso":"ES","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","EdTech Platforms","Video Conferencing & Webinars","Team Communication & Collaboration"],"lifecycle":[{"event":"open","at":"2026-11-13T10:45:18Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":30,"reasons":["conf:1","win:early"],"computed_at":"2026-11-13T12:05:59Z"},"pay":null,"html_url":"https://alion.io/job/sdui-senior-application-security-engineer-2","json_url":"https://alion.io/job/sdui-senior-application-security-engineer-2.json","meta":{"generated_at":"2026-11-13T12:05:59Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":24354,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-14T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2473806},"rest":"https://alion.io/mcp/rest/get_company?id=2473806"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsdui-senior-application-security-engineer-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"free","price":{"credits":0,"usd":0},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsdui-senior-application-security-engineer-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsdui-senior-application-security-engineer-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/sdui-senior-application-security-engineer-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsdui-senior-application-security-engineer-2"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4232829}},{"tool":"search_jobs","arguments":{"company":"sdui.de","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4232829},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}