Lead Application Security Engineer (España)

Lead Application Security Engineer (España)

22 ago
|
Remofirst
|
España

22 ago

Remofirst

España

RemoFirst is changing how the world hires.

We're an affordable, AI-native Employer of Record that combines intelligent agents with a team of human experts to support global hiring, payroll, and HR, while ensuring compliance in 185+ countries. We partner with some of the world's most innovative startups and Fortune 500 companies to support all their general hiring needs.

Since launching in 2021, we've:
- Grown to a strong team of 200+ people across 40+ countries
- Raised $39M+, backed by Octopus Ventures, QED Investors, Mouro Capital, and Counterpart Ventures
- Trusted by startups, fast-growing companies, and Fortune 500 industry leaders. A few amazing customers include HubSpot, PandaDoc, Mastercard, Microsoft
- Named a Leader in the NelsonHall NEAT Evaluation for Global EOR Services
- Recognized on Inc.'s Best Workplaces list and Fast Company's Best Workplaces for Innovators

We're hyper-focused on delivering a world-class platform and unparalleled service — and we're just getting started.

What you'll own

Offensive security




- Run regular internal penetration tests and vulnerability scans against our Python/Django, FastAPI and Java/Spring Boot services.
- Coordinate our independent third-party pentests: scope them, judge the findings, and hold people to remediation instead of filing the report.
- Find the multi-tenancy and authorisation bugs that matter in a platform where one customer's data must never surface in another's account.

Secure SDLC
- Work directly with engineers on code review and threat modelling, and own the ongoing life of our internal security library.
- Own our SAST/DAST tooling and dependency posture — outdated libraries, license misuse, and the judgement to tell a finding from a real risk.
- Secure the layers our services run on: PostgreSQL and MongoDB persistence, Kafka and RabbitMQ streams.
- Build paved roads. A secure SDLC engineers route around is a failed one, so the goal is guardrails they reach for rather than a gate they resent.

Clou

📌 Lead Application Security Engineer (España)
🏢 Remofirst
📍 España

Postulate a este anuncio

Muestra tus habilidades a la empresa, rellenar el formulario y deja un toque personal en la carta, ayudará el reclutador en la elección del candidato.

Suscribete a esta alerta:

Recibe por email las nuevas ofertas de trabajo para: lead application security engineer (españa) / españa

Suscribete a esta alerta:

Recibe por email las nuevas ofertas de trabajo para: lead application security engineer (españa) / españa