Senior Security Engineer

Job not on LinkedIn

🔥 0 minutes ago

🇪🇸 Spain – Remote

💵 €55k - €65k / year

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

team.blue

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

💼 Consulting

📣 Marketing

📦 Logistics

Consulting • Marketing • Logistics

team. blue is a leading digital enabler for companies and entrepreneurs, serving over 3. 3 million customers across Europe. With a team of more than 2000 experts, they provide innovative digital services aimed at empowering businesses through technology. team. blue operates a variety of brands and focuses on delivering excellent customer experiences.

📋 Description

• Own application, cloud and AI security at Metricool • Harden Spring Security, JavaEE filters, CORS, anti-CSRF protections, SameSite/HttpOnly cookie flags, and CSP headers • Run threat modeling and vulnerability testing for AI/LLM features • Protect against OWASP Top 10 for LLMs risks including prompt injection, data poisoning, data leakage, insecure output handling, and API abuse • Define, audit, and collect technical evidence for ISO 27001 and SOC 2 controls • Lead ISO 27001 and SOC 2 audits • Evaluate third-party vendor risk • Configure AWS load balancers, Nginx, Tomcat, Docker container security, and HTTPS enforcement • Conduct code reviews, secret-detection audits, and third-party dependency reviews • Build SAST/DAST/ZAP security checks into CI/CD pipelines • Work with Senior Developers and Leads to integrate security into development • Document controls, evidence, and runbooks to maintain year-round audit readiness • Drive a security-first culture and secure AI adoption • First month: gain context of the monolith architecture, AWS stack, and compliance posture • First quarter: complete AI feature threat modeling, harden security headers, and establish the ISO 27001/SOC 2 evidence collection matrix • Own platform security end to end and lead secure adoption of new AI technologies

🎯 Requirements

• The candidate must be located in Spain • Senior profile with ownership of security end-to-end across application code, cloud infrastructure and compliance • Professional fluency in Spanish (mandatory) and English • Language proficiency check during the hiring process • JavaEE, Spring Security, Vue.js, Node.js, Docker, OWASP ZAP, AWS, Linux, MySQL, Maven, Git/Bitbucket • Understanding of the OWASP Top 10 for LLM Applications, AI data privacy, and secure API/prompt engineering • Knowledge of ISO/IEC 27001 ISMS controls • Knowledge of SOC 2 Type II Trust Services Criteria (security, availability, confidentiality) • Knowledge of vendor risk assessments • Comfortable writing and reviewing code • Pragmatic approach to security and ability to apply controls without heavy bureaucratic overhead • Curiosity about emerging GenAI/LLM risks • Clear communication and ability to turn audit requirements into practical, developer-friendly processes

🏖️ Benefits

• Truly Remote: Work from wherever you’re most productive • 100% Flexible Schedule • Health Insurance • Language Lessons • Annual in-person team gathering (The Epic Weekend) • Growth opportunities