Senior Security Engineer
Guarda esta oferta y sigue tu búsqueda
Crea una cuenta gratis para guardar empleos, crear alertas y volver a esta oferta desde tu panel.
Al continuar, aceptas nuestros Términos & Política de Privacidad.
Experteer Overview In this role you own application, cloud and AI security at Metricool, shaping security into the product from day one.
You will collaborate with cross-functional teams to embed secure practices across a JavaEE/Spring/Vue monolith, AWS infrastructure, and AI features, while driving compliance.
Your work accelerates secure, scalable development and keeps audits seamless year-round.
This is a hands-on, impact-focused position in a fully remote, fast-growing environment with a strong security-driven culture.
Compensaciones / Beneficios
• Own application, platform and AI security across the stack (JavaEE, Spring Security, Vue, AWS) including hardening, CSRF/CSP headers, cookies flags and secure API practices
• Run threat modeling and vulnerability testing for AI/LLM features and protect against OWASP Top 10 for LLMs
• Define, audit and collect evidence for ISO * and SOC 2 controls; lead audits and vendor risk assessments
• Configure and secure infrastructure components (AWS load balancers, Nginx, Tomcat), container security (Docker) and enforce HTTPS
• Perform regular code reviews, secret detection audits, and third-party dependency reviews (Maven, Node.js)
• Build automated security checks (SAST/DAST/ZAP) into CI/CD pipelines
• Document controls, evidence and runbooks to maintain continuous compliance and audit readiness
• Collaborate with Senior Developers and Leads to integrate security early in the development process Responsabilidades
• Located in Spain
• Senior profile with end-to-end security ownership across application code, cloud infra and compliance
• Languages: Spanish (mandatory) and English
• Hard
skills:
JavaEE, Spring Security, Vue.js, Node.js, Docker, OWASP ZAP, AWS, Linux, MySQL, Maven, Git/Bitbucket
• AI u*
* Security knowledge: OWASP Top 10 for LLMs, AI data privacy, secure API/prompt engineering
• Compliance knowledge: ISO/IEC * ISMS controls, SOC 2 Type II criteria, vendor risk assessments
• Soft
skills:
hands-on, pragmatic security mindset, curiosity about GenAI/LLM risks, clear communication Requisitos principales
• fully remote
• flexible schedule
• health insurance
• language lessons
• annual team gathering
• competitive salary (55,****,000)