Senior Security Engineer: AI/Cloud Security Owner (Remote)

Metricool; Valencia; Remote; EUR 55,000 - 65,000; Full time

Benefits offered by this job

Remote work

Health insurance

Language lessons

Annual in-person gathering

Job summary

Metricool is seeking a Senior Security Engineer to own application, cloud and AI security across our Java/JEE stack and AWS infra. You will harden Spring Security, conduct threat modeling for AI features, and drive ISO 27001 and SOC 2 compliance efforts while integrating security into CI/CD.

You will work 100% remotely with a high-growth international B2B SaaS team, collaborating with developers and leads to embed security from the outset and enable secure AI adoption.

Qualifications

• The candidate must be located in Spain.
• Languages: Professional fluency in Spanish (mandatory) and English.
• Senior profile owning security end-to-end across application code, cloud infrastructure and compliance.

Responsibilities

• Application & Platform Security: Harden Spring Security, JavaEE filters, CORS, anti-CSRF protections, SameSite/HttpOnly cookie flags, and strict CSP headers.
• AI Security & Testing: Run threat modeling and vulnerability testing on our AI/LLM features, protecting against the OWASP Top 10 for LLMs: prompt injection, data poisoning, data leakage, insecure output handling, and API abuse.
• Compliance & Auditing (ISO 27001 / SOC 2): Define, audit and collect technical evidence for compliance controls, lead ISO 27001 and SOC 2 audits, and evaluate vendor risk.
• Infrastructure & Cloud Security: Configure AWS load balancers, Nginx, Tomcat, container security (Docker), and HTTPS enforcement.
• Code Reviews & Audits: Run regular code reviews, secret-detection audits, and third-party dependency reviews (Maven, Node.js).
• Build automated security checks (SAST/DAST/ZAP) into our CI/CD pipelines.
• Cross-functional Alignment: Work closely with Senior Developers and Leads to embed security from the start.
• Continuous Improvement: Document controls and runbooks to stay audit-ready year-round.
• Culture of Excellence: Promote a security-first approach for secure AI adoption.

Skills

JavaEE

Spring Security

Vue.js

Node.js

Docker

OWASP ZAP

AWS

Linux

MySQL

Maven

Git/Bitbucket

OWASP Top 10 for LLMs

AI data privacy

Secure API/Prompt engineering

Tools

Docker

OWASP ZAP

AWS

Maven

Git/Bitbucket

Job description

Metricool is seeking a Senior Security Engineer to own application, cloud and AI security across our Java/JEE stack and AWS infra. You will harden Spring Security, conduct threat modeling for AI features, and drive ISO 27001 and SOC 2 compliance efforts while integrating security into CI/CD.

You will work 100% remotely with a high-growth international B2B SaaS team, collaborating with developers and leads to embed security from the outset and enable secure AI adoption.