Remote Senior Security Engineer - AI, Cloud & Compliance

Metricool; Valencia; Remote; EUR 55,000 - 65,000; Full time

Benefits offered by this job

Health Insurance

Flexible Schedule

Language Lessons

Remote Work

Growth Opportunities

Job summary

Metricool is seeking a Senior Security Engineer to own application, cloud and AI security in a fully remote role. You will protect its monolith (JavaEE, Spring Security, Vue) and AWS infrastructure while shaping compliance for ISO 27001 and SOC 2.

You’ll collaborate with senior developers to integrate security into the development process from the start, building automated checks and threat models for AI features. This is a hands-on, security-first position with growth potential.

Qualifications

• Experience owning security end-to-end across application code, cloud infrastructure and compliance.
• Fluent in Spanish and English; language check during hiring.
• Knowledge of ISO/IEC 27001 ISMS controls and SOC 2 criteria, vendor risk assessments.

Responsibilities

• Harden Spring Security, JavaEE filters, CSP headers, cookies and anti-CSRF protections.
• Perform threat modeling and vulnerability testing for AI/LLM features.
• Define and audit compliance controls; lead ISO 27001 and SOC 2 audits.
• Configure AWS load balancers, Nginx, Tomcat, container security (Docker).
• Conduct code reviews, secret-detection audits, and dependency reviews (Maven, Node.js).
• Build automated SAST/DAST/ZAP checks into CI/CD pipelines.

Skills

JavaEE

Spring Security

Vue.js

Node.js

Docker

OWASP ZAP

AWS

Linux

MySQL

Maven

Git/Bitbucket

AI security

Data privacy

Secure API

Tools

OWASP ZAP

AWS

Linux

Job description

Metricool is seeking a Senior Security Engineer to own application, cloud and AI security in a fully remote role. You will protect its monolith (JavaEE, Spring Security, Vue) and AWS infrastructure while shaping compliance for ISO 27001 and SOC 2.

You’ll collaborate with senior developers to integrate security into the development process from the start, building automated checks and threat models for AI features. This is a hands-on, security-first position with growth potential.