Experteer Overview
In this role you will lead hands-on product and application security work, including penetration testing, remediation guidance, and coordinating with customers and vendors. You will expand security coverage for AI-enabled features and agentic integrations, and help drive secure development practices across MCP and AI-connected components. You’ll build security automation and tooling, and manage bug bounty operations. This is a hands-on, collaboration-heavy role with a focus on scalable security in an AI-forward platform.

Compensaciones / Beneficios
• Conduct application-level penetration testing across web and mobile surfaces to identify vulnerabilities and guide remediation
• Coordinate with customers to schedule tests, communicate findings, and provide actionable remediation guidance to engineering teams
• Manage bug bounty workflows and track issues through closure
• Collaborate with product security vendors and internal stakeholders to improve testing effectiveness and consistency
• Build security automation and internal tooling, including AI-assisted workflows for testing, triage, and validation
• Assess AI-enabled features, agentic workflows, retrieval pipelines,



and integrations for risks like prompt injection and data exfiltration
• Test MCP servers and integrations via protocol testing, trusted-client testing, and adversarial scenarios, validating tool descriptions, schemas, permissions, and runtime behavior
• Partner with engineering teams to embed secure development practices for MCP and AI-connected components

Responsabilidades
• Proven experience in penetration testing and software security with knowledge of security protocols, cryptography, and network security
• Experience collaborating with customers, developers, and vendors with strong written and verbal communication skills
• Scripting and automation experience for scaling security testing and remediation workflows
• Fluency in English
• Bachelor’s degree in Computer Science, Information Security, or a related field (preferred)

Requisitos principales
• comprehensive healthcare coverage
• versátil PTO
• equity RSUs
• annual performance bonus opportunities
• retirement account support
• paid parental leave (14+ weeks)

📌 Senior Product Security Engineer (Madrid)
🏢 OneTrust
📍 Madrid