Remote Senior Security Engineer - AI & Cloud Risk Lead

Metricool; Valencia; Remote; EUR 55,000 - 65,000; Full time

Benefits offered by this job

Truly Remote

Flexible Schedule

Health Insurance

Language Lessons

Epic Weekend

Job summary

Metricool is seeking a Senior Security Engineer to own application, cloud, and AI security end‑to‑end. You will harden security across JavaEE, Spring Security, Vue.js, and AWS, while leading threat modeling and vulnerability testing for AI features and ensuring compliance with ISO 27001 and SOC 2.

In this fully remote role, you will collaborate with Senior Developers and Leads to embed security into the development process, drive a security‑first culture, and accelerate secure adoption of new AI

Qualifications

• Must be located in Spain.
• Senior profile owning security end‑to‑end across application code, cloud infrastructure and compliance, not just paper reviews.
• Languages: professional fluency in Spanish (mandatory) and English; language check during hiring.

Responsibilities

• Harden Spring Security and related controls across the stack (JavaEE, Vue, APIs).
• Run threat modeling and vulnerability tests for AI/LLM features; protect against OWASP Top 10 for LLMs.
• Define and audit ISO 27001 / SOC 2 controls; collect evidence and manage vendor risk.
• Configure AWS load balancers, Nginx, Tomcat, Docker container security, and HTTPS enforcement.
• Perform code reviews, secret-detection audits, and dependency reviews (Maven, Node.js).
• Build automated security checks (SAST/DAST/ZAP) into CI/CD pipelines.

Tools

JavaEE

Spring Security

Vue.js

Node.js

Docker

OWASP ZAP

AWS

Linux

MySQL

Maven

Git/Bitbucket

Job description

Metricool is seeking a Senior Security Engineer to own application, cloud, and AI security end‑to‑end. You will harden security across JavaEE, Spring Security, Vue.js, and AWS, while leading threat modeling and vulnerability testing for AI features and ensuring compliance with ISO 27001 and SOC 2.

In this fully remote role, you will collaborate with Senior Developers and Leads to embed security into the development process, drive a security‑first culture, and accelerate secure adoption of new AI