Experteer Overview
In this role you own application, cloud and AI security at Metricool, shaping security into the product from day one. You will collaborate with cross-functional teams to embed secure practices across a JavaEE/Spring/Vue monolith, AWS infrastructure, and AI features, while driving compliance. Your work accelerates secure, scalable development and keeps audits seamless year-round. This is a hands-on, impact-focused position in a fully remote, fast-growing environment with a strong security-driven culture.

Compensaciones / Beneficios
• Own application, platform and AI security across the stack (JavaEE, Spring Security, Vue, AWS) including hardening, CSRF/CSP headers, cookies flags and secure API practices
• Run threat modeling and vulnerability testing for AI/LLM features and protect against OWASP Top 10 for LLMs
• Define, audit and collect evidence for ISO 27001 and SOC 2 controls; lead audits and vendor risk assessments
• Configure and secure infrastructure components (AWS load balancers, Nginx, Tomcat), container security (Docker) and enforce HTTPS
• Perform regular code reviews, secret detection audits, and third-party dependency reviews (Maven, Node.js)




• Build automated security checks (SAST/DAST/ZAP) into CI/CD pipelines
• Document controls, evidence and runbooks to maintain continuous compliance and audit readiness
• Collaborate with Senior Developers and Leads to integrate security early in the development process

Responsabilidades
• Located in Spain
• Senior profile with end-to-end security ownership across application code, cloud infra and compliance
• Languages: Spanish (mandatory) and English
• Hard skills: JavaEE, Spring Security, Vue.js, Node.js, Docker, OWASP ZAP, AWS, Linux, MySQL, Maven, Git/Bitbucket
• AI u0026 Security knowledge: OWASP Top 10 for LLMs, AI data privacy, secure API/prompt engineering
• Compliance knowledge: ISO/IEC 27001 ISMS controls, SOC 2 Type II criteria, vendor risk assessments
• Soft skills: hands-on, pragmatic security mindset, curiosity about GenAI/LLM risks, clear communication

Requisitos principales
• fully remote
• adaptable schedule
• health insurance
• language lessons
• annual team gathering
• competitive salary (55,000–65,000)

📌 Senior Security Engineer - Fully Remote (Spain) (Valencia)
🏢 Team.Blue
📍 Valencia