Remote Platform Security Engineer for Secure SDLC and Cloud

Gomining; España; Híbrido; EUR 65.000 - 90.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Professional development

Flexible work arrangement

Paid time off

Recognition programs

Team retreats

Descripción de la vacante

Gomining in Spain is seeking a Product Security Engineer to partner with engineering teams and build secure systems from the ground up. This hands-on role focuses on improving the security of applications, cloud infrastructure, APIs, and the development lifecycle.

You will perform threat modeling, security reviews, integrate security tooling into CI/CD, and support security testing such as SAST/DAST. Fluent English required; remote/hybrid options available.

Formación

• 4+ years of experience in Product Security, Application Security, Software Engineering, or Security Engineering.
• Strong software engineering background.
• Experience securing backend systems, REST APIs, and microservices.
• Experience with cloud platforms (AWS, GCP, or Azure).
• Strong understanding of Kubernetes, Docker, networking, and infrastructure security.
• Experience with Secure SDLC and security automation.
• Hands-on experience with SAST, DAST, dependency scanning, and secrets management.
• Understanding of OWASP Top 10, common attack vectors, and secure coding practices.
• Ability to work closely with software engineers and influence technical decisions.
• Fluent English.

Responsabilidades

• Review application architecture and new product features from a security perspective.
• Identify security vulnerabilities across backend services, APIs, mobile applications, and web platforms.
• Perform threat modeling and security design reviews.
• Support internal and external penetration testing activities.
• Build and improve Secure SDLC across engineering teams.
• Integrate security tooling into CI/CD pipelines.
• Improve developer security practices and provide technical guidance.
• Help engineering teams remediate vulnerabilities.
• Improve the security posture of our cloud infrastructure.
• Secure Kubernetes environments, IAM policies, secrets management, and infrastructure components.
• Implement security monitoring and hardening best practices.
• Work closely with Platform and DevOps teams.
• Deploy and maintain SAST, DAST, dependency scanning, container scanning, and secret detection.
• Automate security checks and developer workflows.
• Continuously improve security visibility across the engineering organization.

Conocimientos

4+ years experience in ProductSecurity

Software engineering background

Backend & APIs security

Cloud platforms (AWS/GCP/Azure)

Kubernetes & Docker security

Secure SDLC & security automation

SAST/DAST/secret management

OWASP Top 10 knowledge

Collaborate with engineers

Fluent English

Descripción del empleo

Gomining in Spain is seeking a Product Security Engineer to partner with engineering teams and build secure systems from the ground up. This hands-on role focuses on improving the security of applications, cloud infrastructure, APIs, and the development lifecycle.

You will perform threat modeling, security reviews, integrate security tooling into CI/CD, and support security testing such as SAST/DAST. Fluent English required; remote/hybrid options available.