Security Engineer

EIS Group; España; A distancia; EUR 50.000 - 70.000; Jornada completa

Descripción de la vacante

A global software product company is seeking a Junior Security Engineer to support the safeguarding of its SaaS platform. The role involves collaboration with senior engineers and focuses on application security and penetration testing. Ideal candidates should possess foundational security knowledge and a passion for hands-on experience. The position offers competitive compensation and a multicultural work environment.

Servicios

Health insurance

Mobile device

Home office set up compensation

Development programs

Merit-based compensation increase

Formación

• Practical experience in application security aspects.
• Knowledge of programming, debugging, and optimization.
• Familiarity with secure coding practices.

Responsabilidades

• Plan, execute, and document penetration tests.
• Simulate real-world attacks to identify vulnerabilities.
• Conduct code reviews with focus on security.

Conocimientos

Application security knowledge

Penetration testing

Java knowledge

Secure code review

Cloud technologies

Strong communication skills

Educación

BS degree in Computer Science or related fields

Herramientas

Docker

K8s

Spring MVC/Spring Boot

Descripción del empleo

Security Engineer

Department: 508 Production Operations

Employment Type: Full Time

Location: Remote, Spain

Compensation: €2,700 - €3,000 / month

Description

We are looking for a Junior Security Engineer with a strong interest in application security and penetration testing to grow with our team. In this role, you will support the safeguarding of our SaaS platform and assist in security testing activities for our clients. This position is ideal for someone with foundational knowledge in security or software engineering, eager to gain hands-on experience and develop their skills further. You’ll collaborate closely with senior engineers, internal teams, and external stakeholders, so curiosity, a proactive mindset, and good communication skills are key.

Key Responsibilities

• Plan, execute, and document penetration tests against applications, APIs.
• Simulate real-world attacks to identify vulnerabilities and provide clear remediation guidance to development teams.
• Partner with product and engineering teams to embed security throughout the SDLC.
• Conduct code reviews with a focus on secure coding practices.
• Support security tools for vulnerability scanning, SAST/DAST.

Skills, Knowledge & Expertise

• Practical experience in any aspects of application security: penetration testing, security automated scanners, risk evaluation, secure code review or other relevant experience
• BS degree or above in Computer Science or related fields or equivalent practical experience;
• Good knowledge of Java and Java Enterprise technology applications architecture, design, development. Programming, debugging, and optimization skills; Understanding of OOP fundamentals;
• To be familiar with Spring MVC/Spring Boot, Hibernate/JPA, Data Caching Services, DB schema design, and data access technologies
• Knowledge of Cloud foundry, K8s, Docker
• Strong written/verbal communication and excellent teamwork skills; flexible and be a self-starter
• English knowledge - Full working proficiency

Job Benefits

• Work with top talent and great colleagues who are industry and technology experts. Operate in a Scaled Agile environment, diverse, multicultural and cross-functional teams
• We are a global and modern software product company building world-class Enterprise InsurtTech Product powered by leading-edge technologies (microservices, reactive, cloud, continuous delivery)
• We offer freedom - build from building your career path through development programs and exciting global mobility opportunities (we have a global culture)
• Attractive compensation packages (includes merit-based increase)
• Health insurance, mobile device with conversation limit, home office set up one-time compensation
• We work with the newest Apple Macbooks

*Please note that we will be proceeding only with those applications that have valid working permits in the location stated in the vacancy description.