About this role
<div class="rmk-main-content"> <p class="rmk-introduction"><p><span style="font-family:arial, helvetica, sans-serif;font-size:14.0pt">The <strong>Application Security Architect (m/f/d)</strong> designs and implements secure application architectures, defining security controls and policies to protect applications from threats. They provide strategic guidance to developers and security teams.</span></p> <p><span style="font-family:arial, helvetica, sans-serif;font-size:14.0pt"><span>The working location for this position will be in Madrid city where we are currently setting up a new office. We operate a hybrid model, requiring at least 40% of the working time on-site.</span> </span></p></p> <h2 class="rmk-responsibilites-header">Creating passion: your responsibilities</h2> <div class="rmk-resposibilities-content"><ul> <li><span style="font-family:arial, helvetica, sans-serif;font-size:14.0pt">Develop and enforce application security architecture frameworks, policies, standards, and best practices to align with compliance requirements (e.g. OWASP, NIST, ISO 27001)</span></li> <li><span style="font-family:arial, helvetica, sans-serif;font-size:14.0pt">Review and approve application security designs while ensuring secure software development and architecture</span></li> <li><span style="font-family:arial, helvetica, sans-serif;font-size:14.0pt">Integrate security into the software development lifecycle (SDLC) by collaborating with development teams and enabling DevSecOps practices</span></li> <li><span style="font-family:arial, helvetica, sans-serif;font-size:14.0pt">Adopt and promote a security-by-design approach with the different stakeholders</span></li> <li><span style="font-family:arial, helvetica, sans-serif;font-size:14.0pt">Conduct threat modeling, security reviews, and risk assessments to proactively identify and mitigate vulnerabilities</span></li> <li><span style="font-family:arial, helvetica, sans-serif;font-size:14.0pt">Evaluate, recommend, and oversee security tools and testing solutions (SAST, DAST, IAST) to strengthen application security</span></li> <li><span style="font-family:arial, helvetica, sans-serif;font-size:14.0pt">Define security strategies for applications (e.g. IAM) and Implement Security Principles such as Zero Trust</span></li> <li><span style="font-family:arial, helvetica, sans-serif;font-size:14.0pt">Actively contribute to the Coporate Information Security architecture community, sharing insights and best practices</span></li> <li><span style="font-family:arial, helvetica, sans-serif;font-size:14.0pt">Collaborate with IT, EA, DevOps amd Engineering Team to align security Objectives</span></li> </ul></div> <h2 class="rmk-qualification-header">Contributing your strengths: your qualifications</h2> <div class="rmk-qualification-content"><ul> <li><span style="font-family:arial, helvetica, sans-serif;font-size:14.0pt">Bachelor’s/Master’s in Cybersecurity, Computer Science, or related field</span></li> <li><span style="font-family:arial, helvetica, sans-serif;font-size:14.0pt">3+ years in cybersecurity, preferably in application security architecture role</span></li> <li><span style="font-family:arial, helvetica, sans-serif;font-size:14.0pt">Following certificates are preferred; CISSP, SABSA as well as Cloud certifications (AWS, Azure, or GCP)</span></li> <li><span style="font-family:arial, helvetica, sans-serif;font-size:14.0pt">English is a Must, German and French are a plus</span></li> <li><span style="font-family:arial, helvetica, sans-serif;font-size:14.0pt">Good understanding of cybersecurity frameworks and standards (ISO 27001, NIST)</span></li> <li><span style="font-family:arial, helvetica, sans-serif;font-size:14.0pt">Expertise in OWASP, SSDLC, and DevSecOps, with strong knowledge of secure software architecture</span></li> <li><span style="font-family:arial, helvetica, sans-serif;font-size:14.0pt">Strong understanding of microservices security, API security, and IAM (e.g. OAuth, SAML, JWT)</span></li> <li><span style="font-family:arial, helvetica, sans-serif;font-size:14.0pt">Knowledge of cloud-native security and CI/CD integration (e.g. Jenkins, GitHub Actions)</span></li> <li><span style="font-family:arial, helvetica, sans-serif;font-size:14.0pt">Experience with container security and cloud platforms (e.g. AWS, Azure, GCP, Docker, Kubernetes)</span></li> </ul></div> <h2 class="rmk-our-offer-header">Our commitment to you: your benefits</h2> <div class="rmk-our-offer-content"><p><span style="font-family:arial, helvetica, sans-serif;font-size:14.0pt">At Liebherr, we believe people are at the heart of our success. As part of our international team, you’ll enjoy a secure role in a family-owned company that values innovation, collaboration, and long-term career growth:</span></p> <p> </p> <ul> <li><span style="font-family:arial, helvetica, sans-serif;font-size:14.0pt">Competitive compensation and benefits package that recognizes your expertise</span></li> <li><span style="font-family:arial, helvetica, sans-serif;font-size:14.0pt">Flexible and hybrid working model</span></li> <li><span style="font-family:arial, helvetica, sans-serif;font-size:14.0pt">Creative freedom and responsibility to shape processes and solutions in our global transformation</span></li> <li><span style="font-family:arial, helvetica, sans-serif;font-size:14.0pt">Continuous learning and development with tailored training and certification opportunities</span></li> <li><span style="font-family:arial, helvetica, sans-serif;font-size:14.0pt">Meal vouchers</span></li> <li><span style="font-family:arial, helvetica, sans-serif;font-size:14.0pt">Life and accident insurance</span></li> <li><span style="font-family:arial, helvetica, sans-serif;font-size:14.0pt">Option to include a premium private health insurance package as part of the flexible remuneration</span></li> <li><span style="font-family:arial, helvetica, sans-serif;font-size:14.0pt">A safe, stable and international workplace within a trusted family business that invests in people</span></li> </ul> <p> </p> <p><span style="font-family:arial, helvetica, sans-serif;font-size:14.0pt">Please only use the online application option.<br>Please note that we do not accept applications via recruitment agencies for this position.<br></span></p></div> <div class="rmk-posting-closure"> <p class="rmk-closure-content">Have we awoken your interest? Then we look forward to receiving your online application. If you have any questions, please contact Karoliina Rissanen.</p> <p class="rmk-closure-claim"><b>One Passion. Many Opportunities.</b></p> </div> </div> <h2 class="rmk-company-header">The company</h2> <p class="rmk-company-content">Liebherr is a family-run technology company that is not only one of the largest construction machinery manufacturers in the world, but also offers high-quality, user-oriented products and services in many other areas. The Group employs nearly 50,000 people in more than 140 companies on all continents.<span id="cke_bm_1976S" style="display:none"> </span> </p> <h2 class="rmk-address-header">Location</h2> <div class="rmk-address-content"> <p class="rmk-company-name">Liebherr IT Shared Service Centre Ibérica, S.L.</p> <p class="rmk-adressline"></p> <p><span class="rmk-postal-code"></span> <span class="rmk-city">Madrid</span></p> <p class="rmk-country">Spain (ES)</p> </div> <h2 class="rmk-recruiter-header">Contact</h2> <div class="rmk-recruiter"> <p class="rmk-recruiter-name">Karoliina Rissanen</p> <p class="rmk-recruiter-contact">[email protected]</p> <p class="rmk-recruiter-contact-additional"></p> </div>