Vacantes en Burgos, España

We are currently looking for a Senior Security Engineer, Application Security in EMEA.

As a Senior Security Engineer, you will play a key role in ensuring that all software development initiatives meet the highest security standards. You will collaborate closely with development, product, and infrastructure teams to identify, assess, and mitigate potential security risks across applications and systems. This role offers the opportunity to work on cutting-edge DevSecOps technologies, build innovative tools that enhance application security, and shape secure development practices across the organization. You will thrive in a collaborative, remote-first environment where innovation, autonomy, and impact are valued.

• Conduct comprehensive application security reviews, including architecture analysis, threat modeling, and code review.
• Identify vulnerabilities, propose remediation strategies, and demonstrate potential exploitation in controlled environments.
• Define and promote secure development practices to enable product and engineering teams to build secure features efficiently.
• Strengthen software supply chain security by improving workflows, controls, and monitoring processes.
• Contribute directly to product improvements through feedback on platform capabilities and customer-facing features.
• Lead initiatives to enhance the maturity, scalability, and automation of security processes, metrics, and workflows.

• Bachelor’s degree in Computer Science or equivalent practical experience.
• 5+ years of professional experience in IT, technical support, or engineering with strong security focus.
• Solid understanding of application security principles, OWASP Top 10 vulnerabilities, STRIDE, CVSS scoring, and threat modeling.
• Proficiency in one or more programming languages, ideally Ruby on Rails or Go, and comfort with shell scripting.
• Experience conducting application penetration testing or vulnerability research (SQLi, XSS, CSRF, SSRF, etc.).
• Familiarity with tools such as Brakeman and BurpSuite and common security libraries for Ruby on Rails.
• Excellent written and verbal communication skills in English, with the ability to collaborate across technical and non-technical teams.
• Strong problem-solving skills, initiative, and ability to work effectively in a remote, asynchronous environment.

• Fully remote and asynchronous work model.
• Competitive compensation with equity participation and stock purchase options.
• Comprehensive health, wellness, and financial benefits.
• Flexible paid time off and generous parental leave.
• Growth and professional development budget.
• Inclusive team culture supported by resource groups and continuous learning opportunities.
• Home office setup support to ensure optimal productivity.