Senior Security Engineer (Spain Only)

Technosylva; Spain; Remote; EUR 90,000 - 130,000; Full time

Benefits offered by this job

Competitive salary

Private health insurance

Annual bonus

Flexible working hours

Remote work options

Job summary

Technosylva is seeking a Senior Security Engineer to join our Information Security team. You will defend our cloud-hosted platform across cloud and infrastructure security, AI security, vulnerability management, incident response, and security automation.

You will harden cloud configurations, model AI risks, lead incident reviews, and build automated controls with IT and engineering. The role emphasizes collaboration with Infrastructure and Platform teams and reporting risk and posture to

Qualifications

• 5+ years in security engineering and cloud security.
• Hands-on with AWS/Azure cloud configurations hardening.
• Experience with vulnerability management across cloud workloads, servers, endpoints, containers.
• Experience investigating security incidents including root cause analysis and post-incident reviews.
• Knowledge of AI/LLM risks and securing AI features and governance.
• Strong grounding in IAM, network security, and cryptography fundamentals.
• Scripting/automation skills (Python, Bash, AI agents).
• Experience with compliance frameworks (SOC 2, ISO 27001, NIST 800-53 or similar).
• Clear communication to technical and non-technical audiences.

Responsibilities

• Threat model AI/ML features and integrations, review data handling and risk.
• Harden cloud architecture and review cloud configurations (AWS/Azure) against baselines.
• Run vulnerability management across cloud workloads, servers, endpoints, and containers.
• Lead incident response activities, root-cause analysis, and post-incident reviews.
• Build automation and integrations to reduce manual security tasks.
• Support customer assurance and compliance through automated controls and evidence.

Skills

Security engineering

Cloud security (AWS/Azure)

Vulnerability management

Incident response

AI/LLM risk

IAM & cryptography

Scripting (Python/Bash)

Compliance frameworks

Clear communication

Tools

CSPM

SIEM

EDR

Job description

ABOUT THE ROLE

We are looking for a Senior Security Engineer to join our Information Security team and help protect our cloud-hosted platform and the infrastructure behind it. This is a hands-on role with broad scope across cloud and infrastructure security, AI security, vulnerability management, incident response, and security automation.

You will review and harden our cloud environment, improve its security architecture, and run vulnerability management across cloud workloads, servers, endpoints, and containers, from scanning and risk-based prioritization through to remediation. As our use of AI grows, you will model AI features and internal AI tools from a threat perspective, review AI vendors and services, and help turn AI governance into practical controls. You will also take part in incident response, investigate root causes, contribute to post-incident reviews, and strengthen detection and monitoring based on what we learn.

A key part of the role is automation: replacing repetitive manual work with integrations and workflows that keep security continuous rather than point-in-time. You will work closely with our Infrastructure, Platform, and IT teams as a trusted security advisor, and report on risk and posture to leadership.

RESPONSIBILITIES

AI Security

• Threat model of AI/ML and LLM-based features and internal AI tools, including prompt injection, data leakage, model and supply-chain risk, insecure tool or agent permissions, and abuse of connectors and integrations.
• Run security reviews of AI vendors, models, and third-party AI services, covering data handling, retention, training-use terms, and subprocessors.
• Partner with AI governance to put policy into practice: approved-use standards, data classification for AI use, access controls, and logging.
• Support alignment with AI management and risk frameworks (ISO/IEC 42001, NIST AI RMF, OWASP Top 10 for LLM Applications).

Platform, Cloud & Infrastructure Security

• Design and improve security architecture for our cloud-hosted platform, including identity and access management, network segmentation, secrets management, encryption, and tenant isolation.
• Review cloud configurations (AWS and Azure) against security baselines such as CIS Benchmarks and cloud provider best practices. Identify misconfigurations, excessive permissions, exposed services, and drift, and work with IT and engineering to fix them.
• Use cloud security posture management (CSPM) and configuration monitoring tools to keep reviews continuous rather than point-in-time.
• Run vulnerability management across cloud workloads, servers, endpoints, containers, and applications: scan, triage, prioritize by real-world risk and exposure, and track remediation to closure.
• Monitor security advisories and patch-related risk (including post-patch failures) affecting our systems and stack, and coordinate response with IT.

Incident Response & Review

• Participate in security incident response: triage, investigation, containment, and recovery.
• Review security and operational incidents, including those that start as IT or system failures, to determine root cause, security impact, and whether other systems are exposed to the same issue.
• Lead post-incident reviews and write-ups with clear findings, corrective actions, and follow-up audits of similar systems.
• Build detection and monitoring for the platform and AI systems, and improve alerting and runbooks based on lessons learned.
• Track incident trends and report them to IT and operations leadership.

Security Automation

• Automate repetitive security work such as evidence collection, vulnerability triage, alert enrichment, ticketing, and reporting, with scripting and AI agents.
• Build integrations between security tools and the teams that act on their findings, so remediation flows without manual handoffs.
• Evaluate and safely adopt AI-assisted security workflows, with appropriate guardrails, logging, and human oversight.

Compliance & Customer Assurance

• Support the security controls and evidence behind customer and regulatory requirements (for example SOC 2, ISO 27001, and regional frameworks such as ENS) and use compliance automation tooling to keep controls continuously monitored.
• Contribute to security aspects of M&A integration and vendor or entity separation work.

Collaboration & Leadership

• Act as a security advisor to infrastructure, platform and IT teams.
• Report on risk, posture, and progress to IT and operations leadership.

REQUIREMENTS

• 5+ years in security engineering, cloud security, infrastructure and platform security.
• Hands-on experience reviewing and hardening cloud configurations in AWS and/or Azure.
• Experience with vulnerability management tools and processes, including scanning, risk-based prioritization, and remediation tracking across cloud workloads, servers, endpoints, and containers.
• Experience investigating and documenting security incidents, including root cause analysis and post-incident reviews.
• Working knowledge of how LLMs and AI applications are built and deployed, and of their distinct risks (prompt injection, data exfiltration, excessive agency, insecure output handling).
• Strong grounding in secure design, network security, IAM, and cryptography fundamentals.
• Scripting or automation skills (Python, Bash, AI agents, etc.).
• Experience with at least one compliance framework (SOC 2, ISO 27001, FedRAMP/GovRAMP, NIST 800-53 or similar).
• Clear communication with both technical and non-technical audiences.

NICE TO HAVE

• Experience with AI governance or AI risk management (ISO 42001, NIST AI RMF, EU AI Act awareness).
• Background in AI/ML red-teaming or adversarial testing.
• Experience with CSPM, SIEM, or EDR tooling.
• Familiarity with Windows and Linux server hardening and patch management.
• Experience supporting government, utility, or other regulated-industry customers.
• Relevant certifications (CISSP, CCSP, AWS/Azure security, GIAC, or AI-security specialty credentials).

BENEFITS

• Competitive annual salary.
• Private health insurance and a flexible benefits plan, allowing you to tailor part of your compensation package to your personal needs.
• Annual bonus based on individual performance and company results.
• Flexible working hours.
• Remote work options.

At Technosylva, we value diverse experiences and skills, and we understand that every career path is unique. We encourage anyone who believes they meet most of the requirements and is interested in growing and contributing in this role to apply.

DISCLAIMER

Final salary and benefits will depend on a variety of factors, including location, experience, training, qualifications, and market conditions.

EQUAL OPPORTUNITY STATEMENT

Technosylva is an Equal Opportunity Employer. We are committed to fostering an inclusive environment where diverse perspectives lead to better solutions.