Overview

As the Senior Security Engineer at Metricool, you own application, cloud, and AI security across a growing Saa S platform. You work closely with developers to embed security from the start, not just audit later, enabling secure AI features and compliant operations. You will shape security controls, threat modeling, and automated checks, while supporting a remote, international team. Your work directly influences product resilience, data protection, and audit readiness.

Compensaciones / Ventajas

Fully remote work

Flexible schedule

Health insurance

Language lessons (English, Spanish, French, German)

Annual in-person Epic Weekend

Competitive salary (55,000–65,000 EUR) Responsabilidades

Harden application security (Spring Security, Java EE filters, CORS, anti-CSRF, cookie flags, CSP)

Lead AI security and testing, including threat modeling and OWASP Top 10 for LLMs

Define, audit and collect evidence for ISO 27001 and SOC 2 compliance

Manage infrastructure security in AWS, including load balancers, Nginx, Tomcat, and container security

Perform code reviews, secret-detection audits, and dependency reviews (Maven, Node.js)





Build automated security checks (SAST/DAST/ZAP) into CI/CD pipelines

Collaborate with cross-functional teams to integrate security into development processes

Document controls, runbooks, and evidence to maintain year-round audit readiness Requisitos principales

Senior security owner across application, cloud, and compliance

Professional fluency in Spanish and English

Location in Spain

Java EE, Spring Security, Vue.js, Node.js, Docker, OWASP ZAP, AWS, Linux, My SQL, Maven, Git/Bitbucket

Understanding of OWASP Top 10 for LLMs, AI data privacy, secure API/prompt engineering

Knowledge of ISO/IEC 27001 ISMS controls and SOC 2 Type II Trust Services Criteria

Vendor risk assessments

Hands-on code-writing security mindset pragmatic approach to security to avoid slowing development Hands-on mindset with code contributions

Clear communicator; translates audit requirements into developer-friendly processes

Curiosity about emerging risks in Gen AI/LLM adoption

Java EE

Spring Security

Vue.js

📌 Senior Security Engineer - Fully Remote (spain) (Barcelona)
🏢 Team.Blue
📍 Barcelona