OverviewAs the Senior Security Engineer at Metricool, you own application, cloud, and AI security across a growing SaaS platform.
You work closely with developers to embed security from the start, not just audit later, enabling secure AI features and compliant operations.
You will shape security controls, threat modeling, and automated checks, while supporting a remote, international team.
Your work directly influences product resilience, data protection, and audit readiness.
Compensaciones / BeneficiosFully remote work
Adaptable schedule
Health insurance
Language lessons (English, Spanish, French, German)
Annual in-person Epic Weekend
Competitive salary (55,**,000 EUR)
ResponsabilidadesHarden application security (Spring Security, JavaEE filters, CORS, anti-CSRF, cookie flags, CSP)
Lead AI security and testing, including threat modeling and OWASP Top 10 for LLMs
Define, audit and collect evidence for ISO * and SOC 2 compliance
Manage infrastructure security in AWS, including load balancers, Nginx, Tomcat, and container security
Perform code reviews, secret-detection audits, and dependency reviews (Maven, Node.js)




Build automated security checks (SAST/DAST/ZAP) into CI/CD pipelines
Collaborate with cross-functional teams to integrate security into development processes
Document controls, runbooks, and evidence to maintain year-round audit readiness
Requisitos principalesSenior security owner across application, cloud, and compliance
Professional fluency in Spanish and English
Location in Spain
JavaEE, Spring Security, Vue.js, Node.js, Docker, OWASP ZAP, AWS, Linux, MySQL, Maven, Git/Bitbucket
Understanding of OWASP Top 10 for LLMs, AI data privacy, secure API/prompt engineering
Knowledge of ISO/IEC * ISMS controls and SOC 2 Type II Trust Services Criteria
Vendor risk assessments
Hands-on code-writing security mindset
pragmatic approach to security to avoid slowing development
Hands-on mindset with code contributions
Clear communicator; translates audit requirements into developer-friendly processes
Curiosity about emerging risks in GenAI/LLM adoption
JavaEE
Spring Security
Vue.js

📌 Senior Security Engineer (España)
🏢 Team.Blue
📍 España