Senior Application Security Engineer (AppSec) - all genders

BESTSECRET is a leading European online destination for premium and luxury off‑price fashion.

Join BESTSECRET’s growing security engineering team in Málaga and help secure one of Europe’s leading luxury e-commerce platforms.

You’ll work hands‑on across penetration testing, cloud‑native application security, Kubernetes environments, CI/CD pipelines, and modern AI‑assisted development workflows, while helping engineering teams ship securely without slowing innovation.

Qualifications

• Proven hands‑on penetration testing experience across web applications, APIs, mobile apps, backend services, and cloud‑native environments
• Strong application security expertise beyond common frameworks, including business logic flaws, access control issues, SSRF, injection vulnerabilities, and privilege escalation
• Practical experience securing Java applications, ideally with Spring or Spring Boot
• Experience testing microservices and distributed systems, including API gateways, identity propagation, and secrets management
• Solid understanding of cloud‑native platforms (Azure, Kubernetes, containers, infrastructure as code) and CI/CD security controls (SAST, DAST, SCA, etc.)
• Ability to review source code and communicate findings clearly, with pragmatic, risk‑based remediation guidance

Your Profile

• Hands‑on, attacker‑oriented mindset with a focus on identifying complex vulnerabilities
• Strong ability to assess real‑world exploitability and business impact
• Clear and structured communication skills when working with developers and stakeholders
• Pragmatic, solution‑oriented approach without introducing unnecessary process overhead
• Interest in modern development practices, including AI‑assisted coding and related security risks

At BESTSECRET, diversity isn’t just a trend – it’s our professional philosophy. We are dedicated to cultivating an inclusive workplace where everyone’s unique talents and backgrounds are celebrated. Applicants from all backgrounds, experiences and perspectives are welcome to join us in our mission towards a more vibrant and inclusive future.