OverviewAs the Senior Security Engineer at Metricool, you own application, cloud, and AI security across a growing Saa S platform. You work closely with developers to embed security from the start, not just audit later, enabling secure AI features and compliant operations. You will shape security controls, threat modeling, and automated checks, while supporting a remote, international team. Your work directly influences product resilience, data protection, and audit readiness.Compensaciones / BeneficiosFully remote workFlexible scheduleHealth insuranceLanguage lessons (English, Spanish, French, German)Annual in-person Epic WeekendCompetitive salary (55,000–65,000 EUR) ResponsabilidadesHarden application security (Spring Security, Java EE filters, CORS, anti-CSRF, cookie flags, CSP)Lead AI security and testing, including threat modeling and OWASP Top 10 for LLMsDefine, audit and collect evidence for ISO 27001 and SOC 2 complianceManage infrastructure security in AWS, including load balancers, Nginx, Tomcat, and container securityPerform code reviews, secret-detection audits, and dependency reviews (Maven,



Node.Js)Build automated security checks (SAST/DAST/ZAP) into CI/CD pipelinesCollaborate with cross-functional teams to integrate security into development processesDocument controls, runbooks, and evidence to maintain year-round audit readiness Requisitos principalesSenior security owner across application, cloud, and complianceProfessional fluency in Spanish and EnglishLocation in SpainJava EE, Spring Security, Vue.Js, Node.Js, Docker, OWASP ZAP, AWS, Linux, My SQL, Maven, Git/BitbucketUnderstanding of OWASP Top 10 for LLMs, AI data privacy, secure API/prompt engineeringKnowledge of ISO/IEC 27001 ISMS controls and SOC 2 Type II Trust Services CriteriaVendor risk assessmentsHands-on code-writing security mindsetpragmatic approach to security to avoid slowing development Hands-on mindset with code contributionsClear communicator;

translates audit requirements into developer-friendly processesCuriosity about emerging risks in Gen AI/LLM adoptionJava EESpring SecurityVue.Js

📌 Senior Security Engineer - Fully Remote (Spain) (Barcelona)
🏢 Team.Blue
📍 Barcelona