Application Security Engineer (León)

About the Role

We are looking for a Senior Application Security Engineer to modernize vulnerability management at scale within a highly regulated financial services environment. You will govern and analyze large vulnerability datasets from tools including Wiz, Checkmarx, and Snyk, build automated triage and remediation workflows using Python and AI‑assisted agents, and embed security intelligence directly into CI/CD pipelines. The role requires deep AppSec tooling expertise, risk‑based prioritization using CVSS and EPSS, and the ability to provide code‑level remediation guidance to Java development teams.

What You Will Do

• Structure, analyze, and govern the massive output of vulnerability data from across the enterprise portfolio, ensuring it is highly contextualized and ready for consumption by developers and automated systems.
• Triage and prioritize vulnerabilities utilizing data‑driven scoring models (CVSS, EPSS) combined with contextual business and infrastructure risk.
• Continuously tune security scanning tools (SAST, DAST, SCA) and data pipelines to eliminate noise and false positives, delivering only high‑confidence alerts.
• Develop AI‑assisted runbooks, custom scripts, and intelligent agent workflows to automate the triage and remediation of high‑frequency vulnerabilities.
• Partner with platform teams to transform manual security review processes into automated, frictionless governance gates embedded directly within the CI/CD pipeline.
• Work directly with software engineers in their native tech stack (Java, Python) to provide specific, cod