Remote Senior Security Engineer - AI & Cloud

Metricool; Zaragoza; Remote; EUR 55,000 - 65,000; Full time

Benefits offered by this job

Truly Remote

Flexible schedule

Health insurance

Language lessons

Epic Weekend

Competitive salary

Job summary

Metricool is seeking a Senior Security Engineer to own application, cloud and AI security across our JavaEE, Spring Security and Vue stack, AWS infrastructure and internal compliance frameworks. You’ll reduce manual reviews by building automated security controls and guidance for our team.

You’ll work fully remotely with a high-growth, international SaaS, collaborating with developers to embed security from the start, while maintaining ISO 27001 and SOC 2 readiness and threat modeling for LLM

Qualifications

• Must be fluent in Spanish and English; language check during hiring.
• Senior level ownership of security across applications, cloud, and compliance.
• Hands-on security testing, review and automation mindset.

Responsibilities

• Own application and platform security, including Spring Security and code reviews.
• Run AI/LLM security testing and threat modeling for features.
• Define and audit ISO 27001 and SOC 2 controls; manage vendor risk.
• Configure AWS, Nginx/Tomcat, container security, and HTTPS enforcement.
• Automate SAST/DAST/ZAP checks in CI/CD pipelines.
• Collaborate with developers to bake security into the development process.

Skills

JavaEE

Spring Security

Vue.js

Node.js

Docker

OWASP ZAP

AWS

Linux

MySQL

Maven

Git/Bitbucket

AI Security

ISO/IEC 27001

SOC 2

Tools

AWS

Docker

OWASP ZAP

Maven

Git/Bitbucket

Nginx

Tomcat

Job description

Metricool is seeking a Senior Security Engineer to own application, cloud and AI security across our JavaEE, Spring Security and Vue stack, AWS infrastructure and internal compliance frameworks. You’ll reduce manual reviews by building automated security controls and guidance for our team.

You’ll work fully remotely with a high-growth, international SaaS, collaborating with developers to embed security from the start, while maintaining ISO 27001 and SOC 2 readiness and threat modeling for LLM