AI Security – DevSecOps

This is a fully remote position, open to applicants in Spain.

📋 Description

• Join the Cybersecurity team at Paradigma.

• Engage in high-impact technology projects for clients.

• Design and implement end-to-end cybersecurity solutions.

• Safeguard applications and APIs through pentesting, code review, and SSDLC.

• Manage identities and access using Keycloak, OAuth 2.0, OpenID Connect, and SAML.

• Handle secrets with HashiCorp Vault.

• Implement advanced security in Kubernetes / OpenShift.

• Secure the software supply chain using SBOM, SLSA, Cosign, admission control, and artifact signing.

• Integrate security into CI/CD pipelines and DevSecOps practices.

• Conduct hardening, vulnerability management, audits, and incident response.

• Automate tasks using Python, Bash, or Go.

• Design and implement security controls for AI-First solutions.

• Address threats such as prompt injection, jailbreaks, RAG, data poisoning, model extraction, sensitive information leakage, and misuse of tools and agents.

• Incorporate authentication, authorization, isolation, observability, and Responsible AI principles in AI-based applications.

⛳️ Requirements

• Senior Cybersecurity Engineer with a strong technical foundation.

• Ability to implement security controls, analyze alternatives, make technical decisions, and design secure, scalable, and feasible solutions.

• Experience in designing and implementing end-to-end cybersecurity solutions.

• Knowledge of application and API security, including pentesting, code review, and SSDLC.

• Experience with Keycloak, OAuth 2.0, OpenID Connect, and SAML.

• Experience with HashiCorp Vault.

• Advanced knowledge of security in Kubernetes / OpenShift, including RBAC, Network Policies, Security Context, SCCs, and multi-tenancy.

• Understanding of software supply chain security: SBOM, SLSA, Cosign, admission control, analysis, and artifact signing.

• Experience integrating security into CI/CD pipelines and DevSecOps.

• Knowledge of hardening, vulnerability management, auditing, and incident response.

• Ability to automate using Python, Bash, or Go.

• Knowledge of security in AI-First solutions, including prompt injection, jailbreaks, RAG, data poisoning, model extraction, sensitive information leakage, and misuse of tools and agents.

• Understanding of security for models, agents, AI services, and vector databases.

• Knowledge of authentication, authorization, isolation, and observability for AI-based applications.

• Familiarity with Responsible AI and Security/AI Governance by Design.

• Disability certification will be valued.

🏝️ Benefits

• You will have the opportunity to work in a remote or hybrid work model.

• Support from day one through a Buddy program.

• Annual training plan.

• Official certifications.

• Learning spaces to enhance professional development.

• 100% subsidized health insurance.

• Flexible compensation through Edenred.

• 25 days of annual vacation.

• Additional benefits focused on employee well-being.