Remote Senior Security Engineer - AI, Cloud & Compliance

Metricool; Barcelona; Remote; EUR 55,000 - 65,000; Full time

Benefits offered by this job

Truly Remote

Flexible schedule

Health Insurance

Language lessons

Annual team gathering

Competitive salary

Job summary

Metricool is seeking a Senior Security Engineer to own application, cloud and AI security across our JavaEE/Spring/Vue stack on AWS. You will work 100% remotely in a high-growth international SaaS environment.

You will lead threat modeling, implement SAST/DAST in CI/CD, strengthen ISO 27001 and SOC 2 compliance, and audit third-party vendor risk while collaborating with developers and leads from start to finish.

Qualifications

• Senior profile owning security end-to-end across application code, cloud infrastructure and compliance, not just reviewing it on paper.
• Fluent in Spanish and English; language check part of hires process.
• Hands-on, pragmatic security mindset with ability to implement controls without slowing development.

Responsibilities

• Application & Platform Security: Harden Spring Security, JavaEE filters, CORS, anti-CSRF protections, SameSite/HttpOnly cookie flags, and strict CSP headers.
• AI Security & Testing: Run threat modeling and vulnerability testing on our AI/LLM features, protecting against the OWASP Top 10 for LLMs.
• Compliance & Auditing (ISO 27001 / SOC 2): Define, audit and collect evidence for controls, lead audits, evaluate third‑party vendor risk.
• Infrastructure & Cloud Security: Configure AWS load balancers, Nginx, Tomcat, container security (Docker), and HTTPS enforcement.
• Code Reviews & Audits: Run code reviews, secret-detection audits, and dependency reviews (Maven, Node.js).
• Build automated security checks (SAST/DAST/ZAP) into CI/CD pipelines.

Skills

JavaEE

Spring Security

Vue.js

Node.js

Docker

OWASP ZAP

AWS

Linux

MySQL

Maven

Git/Bitbucket

AI security

ISO/IEC 27001

SOC 2

Vendor risk assessments

Tools

Nginx

Tomcat

ZAP

CI/CD

Job description

Metricool is seeking a Senior Security Engineer to own application, cloud and AI security across our JavaEE/Spring/Vue stack on AWS. You will work 100% remotely in a high-growth international SaaS environment.

You will lead threat modeling, implement SAST/DAST in CI/CD, strengthen ISO 27001 and SOC 2 compliance, and audit third-party vendor risk while collaborating with developers and leads from start to finish.