Senior Security Engineer

Hace 2 días

Valencia, España Team.Blue Jornada completa

Experteer Overview In this role you own application, cloud and AI security at Metricool, shaping security into the product from day one.
You will collaborate with cross-functional teams to embed secure practices across a JavaEE/Spring/Vue monolith, AWS infrastructure, and AI features, while driving compliance.
Your work accelerates secure, scalable development and keeps audits seamless year-round.
This is a hands-on, impact-focused position in a fully remote, fast-growing environment with a strong security-driven culture.
Compensaciones / Beneficios
• Own application, platform and AI security across the stack (JavaEE, Spring Security, Vue, AWS) including hardening, CSRF/CSP headers, cookies flags and secure API practices
• Run threat modeling and vulnerability testing for AI/LLM features and protect against OWASP Top 10 for LLMs
• Define, audit and collect evidence for ISO * and SOC 2 controls; lead audits and vendor risk assessments
• Configure and secure infrastructure components (AWS load balancers, Nginx, Tomcat), container security (Docker) and enforce HTTPS
• Perform regular code reviews, secret detection audits, and third-party dependency reviews (Maven, Node.js)
• Build automated security checks (SAST/DAST/ZAP) into CI/CD pipelines
• Document controls, evidence and runbooks to maintain continuous compliance and audit readiness
• Collaborate with Senior Developers and Leads to integrate security early in the development process Responsabilidades
• Located in Spain
• Senior profile with end-to-end security ownership across application code, cloud infra and compliance
• Languages: Spanish (mandatory) and English
• Hard

skills:
JavaEE, Spring Security, Vue.js, Node.js, Docker, OWASP ZAP, AWS, Linux, MySQL, Maven, Git/Bitbucket
• AI u*
* Security knowledge: OWASP Top 10 for LLMs, AI data privacy, secure API/prompt engineering
• Compliance knowledge: ISO/IEC
* ISMS controls, SOC 2 Type II criteria, vendor risk assessments
• Soft

skills:
hands-on, pragmatic security mindset, curiosity about GenAI/LLM risks, clear communication Requisitos principales
• fully remote
• flexible schedule
• health insurance
• language lessons
• annual team gathering
• competitive salary (55,
****,000)