Senior Security Engineer: AI, Cloud & Compliance (Remote)

team.blue; Spain; Remote; EUR 70,000 - 110,000; Full time

Benefits offered by this job

Health insurance

Remote work access

Language lessons

Epic team weekends

Job summary

Metricool is hiring a Senior Security Engineer to own application, cloud and AI security across our platform. You will work remotely (Spain-based) within an international SaaS team, shaping security controls from the start rather than auditing after the fact.

You will lead threat modeling and vulnerability testing for AI features, ensure compliance with ISO 27001 and SOC 2, and integrate security reviews into CI/CD pipelines, empowering developers while maintaining high security standards.

Qualifications

• Spain-based candidate required.
• End-to-end security ownership across application, cloud and compliance.
• Fluent Spanish and English required.
• Hard skills include JavaEE, Spring Security, Vue.js, Node.js, Docker, OWASP ZAP, AWS, Linux, MySQL, Maven, Git/Bitbucket.
• AI & Security knowledge: OWASP Top 10 for LLMs, data privacy, secure API/prompt engineering.
• Compliance knowledge: ISO/IEC 27001 ISMS, SOC 2 Type II, vendor risk.

Responsibilities

• Own security for applications, cloud and AI features across the product.
• Run threat modeling and vulnerability testing on AI/LLM features.
• Lead ISO 27001 and SOC 2 audits and evidence collection.
• Configure AWS load balancing, Nginx, Tomcat, Docker container security, and HTTPS.
• Perform code reviews, secret-detection audits and dependency reviews (Maven, Node.js).
• Build automated security checks (SAST/DAST/ZAP) into CI/CD pipelines.
• Collaborate with developers to embed security from the start.

Skills

JavaEE

Spring Security

Vue.js

Node.js

Docker

OWASP ZAP

AWS

Linux

MySQL

Maven

Git/Bitbucket

Tools

JavaEE

Spring Security

Vue.js

Node.js

Docker

OWASP ZAP

AWS

Linux

MySQL

Maven

Git/Bitbucket

Job description

Metricool is hiring a Senior Security Engineer to own application, cloud and AI security across our platform. You will work remotely (Spain-based) within an international SaaS team, shaping security controls from the start rather than auditing after the fact.

You will lead threat modeling and vulnerability testing for AI features, ensure compliance with ISO 27001 and SOC 2, and integrate security reviews into CI/CD pipelines, empowering developers while maintaining high security standards.