Application Security Engineer (100% remote-friendly within Spain)

Docplanner Tech; Barcelona; Híbrido; EUR 55.000 - 75.000; Jornada completa

Descripción de la vacante

A leading healthcare technology company in Barcelona is looking for a Security Engineer to safeguard software products and ensure their security. The role involves collaborating with development teams to build secure processes, providing guidance on vulnerability management, and automating tasks. Offering competitive salary, remote/hybrid work options, and numerous benefits including private healthcare and language classes.

Servicios

Private healthcare plan

Free English and Spanish classes

Flexible working hours

Share options after 6 months

23 paid holidays

Formación

• Strong knowledge of application security, secure coding practices, and common risks and vulnerabilities.
• Experience working with large, distributed Product and Development teams.
• Ability to automate routine tasks, preferably knowledge of Python.
• Experience testing and securing AI-based projects, including LLMs, is a plus.

Responsabilidades

• Collaborate with development teams to build a secure SDLC.
• Research and configure security tooling for comprehensive security coverage.
• Define security guidelines for applications.
• Develop a vulnerability management system.

Conocimientos

Application security knowledge

Secure coding practices

Experience with cloud native environments

Communication skills

Project management skills

Herramientas

Docker

Kubernetes

AWS

Azure

Jira

Descripción del empleo

Job Description

As a Security Engineer, you will have a crucial role in safeguarding our software products and contributing to our organization's success. You'll collaborate with development teams, share your expertise, and design robust security frameworks. With autonomy to set goals and work with cutting-edge technologies, join us in creating a secure environment and driving our organization forward.

Your mission is to ensure the security and integrity of our software products. You will collaborate with development teams to identify and mitigate vulnerabilities while providing guidance on the best security practices. Together, we can make a difference in software security and join us in this inspiring mission to make the healthcare experience more human.

Key Objectives

• Collaborating with our development teams to build a secure SDLC that integrates security at every stage of the software development process.
• Researching and configuring security tooling to provide comprehensive security coverage.
• Defining security guidelines for our applications to ensure that every product we release is protected against any potential attacks.
• Consulting on new products, which may include pen‑testing, threat modeling, or designing secure solutions, to ensure that they meet our high standards of security.
• Developing a vulnerability management system that identifies and mitigates potential threats before they reach production.
• Helping developers to understand security concepts and practices to foster a culture of security within our organization.

Qualifications

• Relevant professional experience

• Strong knowledge of application security, secure coding practices, and common risks and vulnerabilities.
• Experience working as a partner with large, distributed Product and Development teams.
• Ability to identify and implement improvements to processes and procedures.
• Being able to automate routine tasks, enhance existing solution (preferably, knowledge of Python)
• Experience working with cloud native and containerized environments (AWS / Azure, Docker, Kubernetes), knowledge of common security practices and testing approaches
• Strong hands‑on skills with testing and securing server‑side and client‑side apps
• Experience working with common security certifications and supporting the GRC team. Experience with ISO 2700X, NIST, C5, SOC2, PSI-DSS is a plus.

• SDE background is a plus

• Testing and securing AI‑based projects (LLM, RAG, diffusion models, fine‑tuning pipelines, prompt injection, model extraction, data poisoning) is a plus
• Experience with .NET, PHP, and Javascript environments is a plus

• Communication excellence

• Strong communication skills : you are able to explain complex topics in clear, simple language and are skilled in educating, guiding, and supporting others.
• Experience working in a fast scaling digital company
• You understand the environment of a global organization scaling at pace
• Mindset of building for scale with a data‑driven approach

• Strong Project Management Skills

• Ability to set up goals and priorities for yourself and your peers, to plan and organize work using project management tools like Jira.

Additional Information

Let’s talk money

A salary adequate to your experience and skills.

Flexible remuneration and benefits system via Flexoh , which includes : restaurant card, transportation card, kindergarten, and training tax savings.

Share options plan after 6 months of working with us.

True flexibility and work‑life balance

Remote or hybrid work model with our hub in Barcelona.

Flexible working hours (fully flexible, as in most cases you only have to be on a couple of meetings weekly).

Summer intensive schedule during July and August (work 7 hours, finish earlier).

23 paid holidays, with exchangeable local bank holidays.

Additional paid holiday on your birthday or work anniversary (you choose what you want to celebrate).

Health comes first

Private healthcare plan with Adeslas for you and subsidized for your family (medical and dental).

Access to hundreds of gyms for a symbolic fee in partnership for you and your family with Andjoy .

Access to iFeel , a technological platform for mental wellness offering online psychological support and counseling.

Keep growing with us

Free English and Spanish classes.

We promote and embrace equal opportunities in our hiring process, and also every day at work. When you apply for our roles you receive equal treatment regardless of age, disabilities, gender reassignment, marital or civil partner status, pregnancy or parental status, race, colour, nationality, ethnic or national origin, religion or belief, sex, sexual orientation or any other dimension of human difference. If you require additional support in your recruitment process, we kindly encourage you to let us know. Behind those words you’re reading, there’s a person (hi!) who already helped a candidate by adapting the interviews, and now we’re lucky to have this person with us. So, even if you’ve never asked for it before, may this serve as a sign that, now, you can do so. We can only truly be equal if we adapt to each other.

“We believe all humans, in all their beautiful diversity, should have equal rights, dignity and respect. Period.” Mariusz Gralewski, CEO