Senior Application Security Engineer - Remote, Cloud & AI

RemoFirst; España; Presencial; EUR 85.000 - 120.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Parental leave

Wellbeing stipend

Remote-first, always

Descripción de la vacante

RemoFirst is seeking an experienced security engineer to own offensive security, secure SDLC, and cloud security across our Python, Java, and microservices stack. You’ll drive risk-based decisions, coordinate external pentests, and strengthen identity and API security for0 client-facing applications.

You will work in a remote-first setup, collaborating with engineers worldwide to protect data across multi-tenant systems and a scale-out platform.

Formación

• Deep hands-on application security in a real engineering org with code review and threat modelling.
• Experience with Python and Java services (Django, FastAPI, Spring Boot) and messaging with Kafka/RabbitMQ.
• Strong AWS security posture, IAM, SCPs, EKS, RDS, S3, and least privilege principle.
• Practical security of customer-facing identity (Auth0, SAML, OIDC) and API security.

Responsabilidades

• Run internal pen tests and vulnerability scans on Python/Django, FastAPI, and Java services.
• Coordinate third-party pentests and ensure remediation of findings.
• Own secure SDLC practices, code reviews, threat modelling, and security library lifecycle.
• Secure cloud layers: PostgreSQL, MongoDB, Kafka, RabbitMQ and container/Kubernetes workloads.
• Define guardrails for AI/security data handling and model pipeline security.

Conocimientos

Offensive security

Python

Java

Django

FastAPI

Spring Boot

Kafka

RabbitMQ

PostgreSQL

MongoDB

AWS security

Auth0

SAML/OIDC

SAST/DAST tooling

API security

Terraform

Threat modelling

Herramientas

Auth0

SAML

OIDC

Terraform

Kubernetes

CI/CD tooling

Descripción del empleo

RemoFirst is seeking an experienced security engineer to own offensive security, secure SDLC, and cloud security across our Python, Java, and microservices stack. You’ll drive risk-based decisions, coordinate external pentests, and strengthen identity and API security for0 client-facing applications.

You will work in a remote-first setup, collaborating with engineers worldwide to protect data across multi-tenant systems and a scale-out platform.