Cyber Security Specialist 4 - Appsec
About the job
- Solid knowledge of the software development life cycle and secure software development life cycle practices.
- Experience implementing DevSecOps pipelines, including static application security testing, dynamic application security testing, software composition analysis, infrastructure as code, continuous integration and continuous delivery, and GitHub Actions.
- Experience in security architecture, application programming interfaces, microservices, containers, multicloud environments, Blue Team operations, and incident response, including investigation, containment, forensic analysis, threat modeling, STRIDE, OWASP Top 10, ASVS, MASVS, and security standards.
- Solid knowledge of cryptography, access control, authentication and authorization, hardening, data protection, malware analysis, and mobile application security.
- Experience with security tools for static application security testing, dynamic application security testing, interactive application security testing, infrastructure as code, and container security.
- Ability to analyze security requirements and support engineering teams with development recommendations and security practices.
- Advanced English for communication with the global team.
- Act as an advanced technical consultant for Cyber, Architecture, and Engineering, advising on risks, controls, and vulnerability mitigation strategies.
- Lead and evolve the DevSecOps process, ensuring security is integrated into the development life cycle, including static application security testing, software composition analysis, dynamic application security testing, infrastructure as code, and secrets management.
- Conduct security testing, including static, dynamic, and interactive analysis, secure code reviews, threat modeling, and technical business analysis from a security perspective.
- Define and review software development life cycle processes and security architecture guidelines for complex applications, microservices, application programming interfaces, mobile, cloud, and continuous integration and delivery pipelines.
- Respond to incidents, including forensic analysis, evidence collection, root-cause investigation, and remediation recommendations.
- Coordinate and support Red Team versus Blue Team simulations to continuously improve cyber defenses.
- Support and guide Protect and Detect services by assessing control maturity, performance, and effectiveness.
- Support adoption of new technologies, container security, and automation.
- Conduct continuous risk assessments, architecture reviews, proofs of concept, and technical validations.
- Work collaboratively with development, Cloud, Infrastructure, Governance, Risk and Compliance, and Identity and Access Management teams using a holistic cybersecurity perspective.
- Experience with Red Team operations, vulnerability exploitation, and MITRE ATT&CK techniques.
- Knowledge of artificial intelligence applied to security, including detection, automation, and triage.
- Experience with Databricks, data pipelines, machine learning, and secure data governance.
- Familiarity with reverse engineering, security process orchestration, and large language models for security.
- Ability to create internal frameworks, reusable security standards, and security training for engineering.
About the company
Santander is a global bank focusing on retail and commercial banking in Europe and the Americas. It serves individuals and SMEs through strong regional franchises (Spain, Brazil, the UK, the US) and a broad Consumer Finance arm, while supporting multinational clients via its Corporate & Investment Banking division. It digitalizes core banking on its Gravity cloud to rapidly deploy digital solutions like Openbank and cross-border services, blending fintech agility with a traditional bank balance sheet. Its goal is to improve efficiency under the One Santander framework, grow cross-border revenue, and finance sustainable initiatives aligned with Net Zero targets.
Company Size
10,001+
Company Stage
IPO
Headquarters
Boadilla del Monte, Spain
Founded
1902
Get referred to Santander
See people who can refer or advise you
Simplify's Take
What believers are saying
- Green finance reached €188 billion by June 2026, 85% of the 2030 target.
- Peru's 467 MWp Illa solar financing expands Santander's Andean project-finance franchise.
- H1 2026 revenue grew 6.5%, supporting management's 2026 profit-growth target.
What critics are saying
- Santander UK booked £633 million for motor-finance redress; tribunal hearings run into 2027.
- Webster integration threatens synergies, capital ratios, and the 2028 U.S. profitability thesis.
- Santander UK cut 44 branches in 2026, risking customer attrition and labor conflict.
What makes Santander unique
- Santander completed Webster acquisition on August 20, 2026, creating a top-ten U.S. bank.
- Gravity migrated 97% of IT to cloud, enabling faster product rollouts.
- Openbank and Work Cafés give Santander a hybrid digital-branch model across markets.
Help us improve and share your feedback! Did you find this helpful?
Benefits
Health, dental, & vision
401k
Flexible PTO
Parental & sick leave
Discounts: technology, travel, auto, fitness, & tuition
Growth & Insights and Company News
6 month growth
-14%1 year growth
-3%2 year growth
-3%Global law firm Clifford Chance has advised a syndicate of lenders on US$480 million in senior unsecured facilities for Alicorp, a Peruvian consumer goods company. The financing includes a five-year US$250 million term loan facility and a three-year US$230 million revolving credit facility. The term loan is divided into tranches for Alicorp's operations in Colombia (up to US$110 million), Spain (US$35 million), and Ecuador (US$90 million). The revolving facility is for Alicorp's Peruvian entity and includes two one-year extension options. Banco Bilbao Vizcaya Argentaria, Citibank, JPMorgan Chase Bank, and Banco Santander served as joint lead arrangers and bookrunners. The transaction spans four jurisdictions and two currencies, with proceeds earmarked for general corporate purposes and liquidity management.
CTO Realty Growth has closed a $1.0 billion unsecured credit facility, extending its debt maturity profile and increasing total commitments by $250 million. The Winter Park, Florida-based owner and operator of open-air shopping centres will use proceeds to repay outstanding borrowings under its previous $300 million revolving credit facility and two term loans. The new facility comprises a $400 million revolving credit facility due September 2030 and four term loans ranging from $150 million each, maturing between September 2029 and March 2032. The refinancing increases the company's weighted average debt maturity to 4.3 years from 1.6 years. Initial fixed interest rates on the term loans range from 3.4% to 5.3%, based on applied SOFR swaps. The facility was provided by a syndicate led by KeyBank National Association.
Optimitive won the Internationalization Runner-up Award in Álava at the PYME of the Year Awards! Published:30 de September de 2026 OPTIMITIVE has been granted the Internationalization Runner-up Award in Álava at the PYME of the Year Awards, an accolade given by the Spanish Chamber of Commerce and Banco Santander, in collaboration with El Correo and SEA Empresas Alavesas. The awards ceremony took place on September 29 in Vitoria-Gasteiz, and OPTIMITIVE was represented by several team members, including Fernando de la Prida, CEO, and Javier A. García Sedano, Founder and CTO. In the words of the latter, who collected the award: "Internationalization is in our blood. We have always believed that the barriers were not in geography, but in the mind. You don't need to be in Silicon Valley to create world-class technology; it can be done in Vitoria, and we can make Vitoria a Silicon Valley." OPTIMITIVE and internationalization as a core value Since OPTIMITIVE's mission is to make industrial processes more efficient and sustainable through the use of Artificial Intelligence, helping to create a better world to live in, borders do not exist. Internationalization is one of OPTIMITIVE's core values. The company has carried out projects around the world since its origins, and today it optimizes industrial processes in seven major regions of the world (Europe, North America, South America, Africa, the Middle East, India and Asia-Pacific). But it is not only about looking outward: at home, internationalization is also a key consideration when building the team. Respect, diversity and inclusion, along with HR policies geared towards equal opportunities, have resulted in nine different nationalities among its employees and executives. Thank you to the Spanish Chamber of Commerce, Banco Santander, El Correo and SEA Empresas Alavesas for this recognition.
Global law firm Clifford Chance advised Banco Santander, S.A. (Santander), as lead arranger and lender, in connection with a senior secured term loan facility of up to US$209 million made available to members of the Ransa group across Spain, Peru, Chile, Colombia, Guatemala, Honduras and El Salvador.
NOT FOR RELEASE, PUBLICATION OR DISTRIBUTION DIRECTLY OR INDIRECTLY TO ANY U.S. PERSON OR ANY PERSON LOCATED IN THE UNITED STATES OF AMERICA OR IN ANY OTHER JURISDICTION WHERE IT IS UNLAWFUL TO...