Experteer Overview In this role you own application, cloud, and AI security for Metricool, shaping security into the product rather than auditing after the fact.

You will work remotely in a fast-growing international SaaS team, partnering with developers to embed security from the start.

You’ll tackle AI/LLM security, compliance programs, and cloud infrastructure hardening, driving a security-first culture.

This position offers meaningful impact across monoliths, AWS, and AI features while enabling continuous, audit-ready compliance.

Compensaciones / Ventajas• Harden application and platform security (Spring Security, JavaEE, CSP headers, CSRF, cookies)• Conduct threat modeling and vulnerability testing for AI/LLM features (OWASP Top 10 for LLMs)• Define, audit, and collect evidence for ISO 27001 and SOC 2 controls; lead audits and vendor risk assessments• Secure AWS infrastructure and web components (load balancers, Nginx, Tomcat, Docker, HTTPS)• Perform code reviews,



secret-detection audits, and dependency reviews (Maven, Node.js)• Integrate SAST/DAST/ZAP into CI/CD pipelines

Responsabilidades• Senior profile with end-to-end security ownership across applications, cloud, and compliance• Located in Spain• Spanish (mandatory) and English proficiency• JavaEE, Spring Security, Vue.js, Node.js, Docker, OWASP ZAP, AWS, Linux, MySQL, Maven, Git/Bitbucket• AI security: OWASP Top 10 for LLMs, data privacy, secure API/prompt engineering• Compliance knowledge: ISO/IEC 27001 ISMS controls, SOC 2 Type II Trust Services Criteria, vendor risk assessments

Requisitos principales• Fully remote work• 100% flexible schedule• Health insurance• Language lessons for English, Spanish, French, German• Annual in-person gathering (epic weekend)• Competitive salary (55k–65k)

📌 Senior Security Engineer - Fully Remote (Spain) (Madrid)
🏢 Team.Blue
📍 Madrid