Descripción de la oferta
Experteer Overview
In this role you own application, cloud, and AI security for Metricool, shaping security into the product rather than auditing after the fact. You will work remotely in a fast-growing international SaaS team, partnering with developers to embed security from the start. You’ll tackle AI/LLM security, compliance programs, and cloud infrastructure hardening, driving a security-first culture. This position offers meaningful impact across monoliths, AWS, and AI features while enabling continuous, audit-ready compliance.
Compensaciones / Beneficios
• Harden application and platform security (Spring Security, JavaEE, CSP headers, CSRF, cookies)
• Conduct threat modeling and vulnerability testing for AI/LLM features (OWASP Top 10 for LLMs)
• Define, audit, and collect evidence for ISO 27001 and SOC 2 controls; lead audits and vendor risk assessments
• Secure AWS infrastructure and web components (load balancers, Nginx, Tomcat, Docker, HTTPS)
• Perform code reviews, secret-detection audits, and dependency reviews (Maven, Node.js)
• Integrate SAST/DAST/ZAP into CI/CD pipelines
Responsabilidades
• Senior profile with end-to-end security ownership across applications, cloud, and compliance
• Located in Spain
• Spanish (mandatory) and English proficiency
• JavaEE, Spring Security, Vue.js, Node.js, Docker, OWASP ZAP, AWS, Linux, MySQL, Maven, Git/Bitbucket
• AI security: OWASP Top 10 for LLMs, data privacy, secure API/prompt engineering
• Compliance knowledge: ISO/IEC 27001 ISMS controls, SOC 2 Type II Trust Services Criteria, vendor risk assessments
Requisitos principales
• Fully remote work
• 100% flexible schedule
• Health insurance
• Language lessons for English, Spanish, French, German
• Annual in-person gathering (epic weekend)
• Competitive salary (55k–65k)
