Security Engineer

This is a fully remote position, open to applicants in Spain.

📋 Description

• Take charge of safeguarding our product, users, and collaborators.

• Engage directly in application security, risk and compliance, and security awareness.

• Conduct weekly code reviews to identify vulnerabilities before deployment.

• Monitor, prioritize, and facilitate the resolution of security vulnerabilities across the entire stack.

• Organize external security audits and penetration tests, ensuring follow-up on findings.

• Maintain and enhance our risk register, mapping all company services and prioritizing exposure risks.

• Assist with audit follow-ups and ensure that GRC documentation remains current.

• Inform the team of new threats, document findings, and disseminate security updates throughout the company.

• Execute phishing simulations and deliver security training (via Riot).

• Oversee the monitoring of security channels and alerts, including weekend coverage.

• Set up and secure new employee devices (MDM) and manage access provisioning and deprovisioning.

• Monitor emerging attack techniques aimed at generative AI, such as prompt injection, jailbreaks, and content filter bypass.

• Track security incidents and vulnerabilities reported by third-party AI providers we rely on.

⛳️ Requirements

• Extensive experience in application security, including code review and vulnerability management.

• Proven experience in coordinating or executing penetration tests and security audits.

• Proficient in shipping code and utilizing Git/GitHub workflows.

• Strong scripting and automation skills.

• Bonus: familiarity with AI/LLM security concepts (prompt injection, jailbreaking, adversarial testing) — curiosity is valued over proven experience in this emerging field.

• Excellent communication and collaboration skills (fluent in English).

• Goal-oriented with a strong sense of ownership and commitment.

• A proactive mindset - we are moving quickly and need individuals who can strike a balance between execution, planning, and strategy.

• Humble and eager to learn, open to constructive feedback.

• Comfortable working in an environment that involves uncensored models and content.

🏝️ Benefits

• Contract Type: We prefer B2B arrangements, but flexibility is available; long-term commitment and impact are what matter most.

• Work From Anywhere: Fully remote position. Select the environment in which you perform best.

• Paid Time Off: Enjoy 4 weeks (20 working days) of PTO annually to recharge and refresh.

• Annual Gathering: Participate in a yearly in-person meetup to connect, brainstorm, and celebrate successes together.

• Health & Wellness Support: Receive a monthly allowance of 100 USD for health insurance expenses and access to unlimited 1:1 sessions with psychologists and lifestyle experts through OpenUp (also available for up to three family members).

• Co-Working Space Budget: Work from a co-working space up to twice a month (35 EUR / 40 USD per visit) to stay inspired and connected.

• Learning Budget: Access dedicated funds to support your professional development: for courses, books, conferences, events, or certifications.

• Company Laptop & Equipment: Laptop provided, plus a monitor budget of up to 250 USD and budget for keyboard/mouse/mic/headphones up to 150 USD.

• AI Tools Access: Receive premium access to ChatGPT, Cursor, Hugging Face, Claude Code, and any additional tools necessary to excel in your role and enhance your workflows.