Overview
Inscríbase ahora, lea los detalles del trabajo desplazándose hacia abajo. Verifique que posee las habilidades necesarias antes de enviar una solicitud.
As an Application Security Engineer at Factorial, you help build secure software at speed by actively hunting vulnerabilities and shaping practical security practices. You’ll work with Product and Engineering to integrate security into design, testing, and operations, including AI-enabled features. You’ll fix issues, build guardrails, and automate security controls used by developers daily. This role offers exposure to a fast-moving, AI-driven environment with real impact on product security and risk posture.
Compensaciones / Ventajas
private health insurance
Wellhub fitness benefits
Cobee expense savings
language classes
office breakfast and organic fruit
pet-friendly office
Responsabilidades
Conduct proactive penetration testing across applications, APIs, infrastructure, and AI features
Reproduce and validate vulnerability reports from third parties and bug bounty programs
Collaborate with development teams to remediate findings and improve secure coding practices
Improve validation, triage, and remediation workflows for vulnerabilities from bugs, automated controls, and external research
Identify recurring or legacy vulnerability patterns via root cause analysis and past incidents
Build and enhance security automations, agents,



and CI/CD controls for earlier issue detection
Secure AI usage across product and internal workflows, including LLMs, data access, tools, permissions, and abuse scenarios
Contribute to security tools, automations, and infrastructure development
Stay current with security research, threats, and emerging AI security risks
Requisitos principales
3+ years of experience in Application Security, Offensive Security, or Penetration Testing with mandatory Web Application Penetration Testing
Degree in Engineering or Computer Science with solid knowledge of web apps, databases, networks, and operating systems
Strong grounding in cybersecurity fundamentals, CVSS, testing methodologies, and tooling xqbhyrx
Scripting/programming skills used in security testing and automation (e.g., Python or Bash)
Ability to move across different security problems, balance attack focus with tool-building, and design pragmatic solutions
Curiosity about AI security topics (LLM testing, prompt injection, agentic workflows, data exposure, tool permissions, RAG security)
Certifications like BSCP or eWPTX are valued but not required
Experience with Ruby/Ruby on Rails is a plus but not mandatory
English fluency
curious
problem-solving mindset
collaborative teamwork
Web Application Penetration Testing
secure coding practices
Scripting in Python or Bash

📌 Offensive Security Engineer (Barcelona)
🏢 Factorial Hr
📍 Barcelona