We are looking for a Security Engineer who can move fast, test aggressively and scale what works. you will take ownership of protecting our product, our users, and our collaborators as we scale a fast.Your responsibilities: Perform weekly code reviews to catch vulnerabilities before they shipTrack, prioritize, and drive remediation of security vulnerabilities across the stackCoordinate external security audits and penetration tests, and follow through on findingsMaintain and evolve our risk register, mapping all company services and prioritizing what's exposedSupport audit follow-up and keep GRC documentation up to dateCommunicate new threats to the team, document findings, and broadcast security updates company-wideRun phishing simulationsOwn the monitoring of security channels and alerts, including weekend coverage,



so nothing goes unansweredSet up and secure new employee devices (MDM), manage access provisioning / deprovisioningKeep an eye on emerging attack techniques targeting generative AITrack security incidents and vulnerabilities disclosedWhat we are looking for: 5 years in a security environment working in a startup or scale up.Solid experience in application security (code review, vulnerability management)Experience coordinating or conducting penetration tests / security auditsComfortable shipping code and working with Git/GitHub workflowsScripting/automation skillsThis is a fully remote position which can be based globally given a +-4 hour time difference within the CET region.#J-18808-Ljbffr

📌 Security Engineer (Zaragoza)
🏢 Ersilia
📍 Zaragoza