Senior Application Security Engineer (AppSec) - all genders

BESTSECRET is a leading European online destination for premium and luxury off‑price fashion.

Join BESTSECRET’s growing security engineering team in Málaga and help secure one of Europe’s leading luxury e-commerce platforms.

You’ll work hands‑on across penetration testing, cloud‑native application security, Kubernetes environments, CI/CD pipelines, and modern AI‑assisted development workflows, while helping engineering teams ship securely without slowing innovation.

Qualifications

• Proven hands‑on penetration testing experience across web applications, APIs, mobile apps, backend services, and cloud‑native environments
• Strong application security expertise beyond common frameworks, including business logic flaws, access control issues, SSRF, injection vulnerabilities, and privilege escalation
• Practical experience securing Java applications, ideally with Spring or Spring Boot
• Experience testing microservices and d...