Experteer Overview In this role you own application, cloud, and AI security for Metricool, shaping security into the product rather than auditing after the fact.
You will work remotely in a fast-growing international SaaS team, partnering with developers to embed security from the start.
You'll tackle AI/LLM security, compliance programs, and cloud infrastructure hardening, driving a security-first culture.
This position offers meaningful impact across monoliths, AWS, and AI features while enabling continuous, audit-ready compliance.
Compensaciones / Beneficios
• Harden application and platform security (Spring Security, JavaEE, CSP headers, CSRF, cookies)
• Conduct threat modeling and vulnerability testing for AI/LLM features (OWASP Top 10 for LLMs)
• Define, audit, and collect evidence for ISO * and SOC 2 controls; lead audits and vendor risk assessments
• Secure AWS infrastructure and web components (load balancers, Nginx, Tomcat, Docker, HTTPS)
• Perform code reviews, secret-detection audits,



and dependency reviews (Maven, Node.js)
• Integrate SAST/DAST/ZAP into CI/CD pipelines Responsabilidades
• Senior profile with end-to-end security ownership across applications, cloud, and compliance
• Located in Spain
• Spanish (mandatory) and English proficiency
• JavaEE, Spring Security, Vue.js, Node.js, Docker, OWASP ZAP, AWS, Linux, MySQL, Maven, Git/Bitbucket
• AI security: OWASP Top 10 for LLMs, data privacy, secure API/prompt engineering
• Compliance knowledge: ISO/IEC * ISMS controls, SOC 2 Type II Trust Services Criteria, vendor risk assessments Requisitos principales
• Fully remote work
• 100% versátil schedule
• Health insurance
• Language lessons for English, Spanish, French, German
• Annual in-person gathering (epic weekend)
• Competitive salary (55k–65k)

📌 Senior Security Engineer (Madrid)
🏢 Team.Blue
📍 Madrid