Overview

As the Senior Security Engineer at Metricool, you own application, cloud, and AI security across a growing SaaS platform. You work closely with developers to embed security from the start, not just audit later, enabling secure AI features and compliant operations. You will shape security controls, threat modeling, and automated checks, while supporting a remote, international team. Your work directly influences product resilience, data protection, and audit readiness.

Compensaciones / Beneficios

- Fully remote work
- Adaptable schedule
- Health insurance
- Language lessons (English, Spanish, French, German)
- Annual in-person Epic Weekend
- Competitive salary (55,000–65,000 EUR)

Responsabilidades

- Harden application security (Spring Security, JavaEE filters, CORS, anti-CSRF, cookie flags, CSP)
- Lead AI security and testing, including threat modeling and OWASP Top 10 for LLMs
- Define, audit and collect evidence for ISO 27001 and SOC 2 compliance
- Manage infrastructure security in AWS, including load balancers, Nginx, Tomcat, and container security
- Perform code reviews, secret-detection audits, and dependency reviews (Maven, Node.js)




- Build automated security checks (SAST/DAST/ZAP) into CI/CD pipelines
- Collaborate with cross-functional teams to integrate security into development processes
- Document controls, runbooks, and evidence to maintain year-round audit readiness

Requisitos principales

- Senior security owner across application, cloud, and compliance
- Professional fluency in Spanish and English
- Location in Spain
- JavaEE, Spring Security, Vue.js, Node.js, Docker, OWASP ZAP, AWS, Linux, MySQL, Maven, Git/Bitbucket
- Understanding of OWASP Top 10 for LLMs, AI data privacy, secure API/prompt engineering
- Knowledge of ISO/IEC 27001 ISMS controls and SOC 2 Type II Trust Services Criteria
- Vendor risk assessments
- Hands-on code-writing security mindset
- pragmatic approach to security to avoid slowing development

- Hands-on mindset with code contributions
- Clear communicator; translates audit requirements into developer-friendly processes
- Curiosity about emerging risks in GenAI/LLM adoption
- JavaEE
- Spring Security
- Vue.js

📌 Senior Security Engineer - Fully Remote (Spain) (Barcelona)
🏢 Team.Blue
📍 Barcelona