Experteer Overview
As an Application Security Engineer at Factorial, you help build secure software at speed by actively hunting vulnerabilities and shaping practical security practices. You’ll work with Product and Engineering to integrate security into design, testing, and operations, including AI-enabled features. You’ll fix issues, build guardrails, and automate security controls used by developers daily. This role offers exposure to a fast-moving, AI-driven environment with real impact on product security and risk posture.

Compensaciones / Incentivos
• Conduct proactive penetration testing across applications, APIs, infrastructure, and AI features
• Reproduce and validate vulnerability reports from third parties and bug bounty programs
• Collaborate with development teams to remediate findings and improve secure coding practices
• Improve validation, triage, and remediation workflows for vulnerabilities from bugs, automated controls, and external research
• Identify recurring or legacy vulnerability patterns via root cause analysis and past incidents
• Build and enhance security automations, agents, and CI/CD controls for earlier issue detection
• Secure AI usage across product and internal workflows, including LLMs, data access, tools, permissions, and abuse scenarios
• Contribute to security tools,



automations, and infrastructure development
• Stay current with security research, threats, and emerging AI security risks

Responsabilidades
• 3+ years of experience in Application Security, Offensive Security, or Penetration Testing with mandatory Web Application Penetration Testing
• Degree in Engineering or Computer Science with solid knowledge of web apps, databases, networks, and operating systems
• Strong grounding in cybersecurity fundamentals, CVSS, testing methodologies, and tooling
• Scripting/programming skills used in security testing and automation (e.g., Python or Bash)
• Ability to move across different security problems, balance attack focus with tool-building, and design pragmatic solutions
• Curiosity about AI security topics (LLM testing, prompt injection, agentic workflows, data exposure, tool permissions, RAG security)
• Certifications like BSCP or eWPTX are valued but not required
• Experience with Ruby/Ruby on Rails is a plus but not mandatory
• English fluency

Requisitos principales
• private health insurance
• Wellhub fitness benefits
• Cobee expense savings
• language classes
• office breakfast and organic fruit
• pet-friendly office

📌 Offensive Security Engineer (Barcelona)
🏢 Factorial Hr
📍 Barcelona