Remote Senior Security Engineer: AI, Cloud & Compliance

Metricool; Zaragoza; Remote; EUR 55,000 - 65,000; Full time

Benefits offered by this job

Truly remote

Flexible schedule

Health insurance

Language lessons

Job summary

Metricool is hiring a Senior Security Engineer to own application, cloud and AI security end-to-end. You will harden security across JavaEE, Spring Security, Vue, Docker and AWS, while driving compliance with ISO 27001 and SOC 2.

You will work 100% remotely from Spain, collaborating with senior developers and leads to embed security into the development process and automate security checks in CI/CD.

Qualifications

• Senior profile owning security end-to-end across applications, cloud infrastructure and compliance.
• Spanish (mandatory) and English proficiency with language check during hiring.
• Hands-on development mindset, not just audit-focused.

Responsibilities

• Harden Spring Security and related web app security controls.
• Run threat modeling and vulnerability testing for AI/LLM features.
• Define and audit ISO 27001 and SOC 2 controls and evidence.
• Configure AWS load balancers, Nginx, Tomcat, Docker security and HTTPS.
• Conduct code reviews and secret-detection audits; review dependencies.
• Integrate SAST/DAST/ZAP into CI/CD pipelines.

Skills

Threat modeling

Vulnerability testing

Code reviews

CI/CD security

Security architecture

Security controls

Security compliance

Tools

JavaEE

Spring Security

Vue.js

Node.js

Docker

OWASP ZAP

AWS

Linux

MySQL

Maven

Git/Bitbucket

ISO/IEC 27001

SOC 2

Job description

Metricool is hiring a Senior Security Engineer to own application, cloud and AI security end-to-end. You will harden security across JavaEE, Spring Security, Vue, Docker and AWS, while driving compliance with ISO 27001 and SOC 2.

You will work 100% remotely from Spain, collaborating with senior developers and leads to embed security into the development process and automate security checks in CI/CD.