Senior Security Engineer

This is a fully remote position, open to applicants in Spain.

📋 Description

• Take ownership of our vulnerability management program, focusing on application security aspects such as container images, dependencies, code scanning, and runtime detection.

• Develop and sustain security tools that seamlessly integrate into CI/CD pipelines and developer workflows, ensuring that security is an automatic process rather than a checkpoint.

• Leverage AI extensively to accelerate coding, automate analyses that would typically need manual review, and create intelligent tools that can scale beyond the capabilities of a small team working manually.

• Evaluate and enhance our utilization of available telemetry across our systems.

• Collaborate directly with engineering teams to promote secure development practices—not through the creation of standards and documents, but by delivering tools and defaults that make secure choices the most convenient ones.

• Investigate and address security findings as necessary, but prioritize building systems that can prevent and detect issues over manually pursuing them.

• Quickly adapt to shifting priorities—our team operates in an agile manner, and tomorrow's challenges may differ from today's.

⛳️ Requirements

• Minimum of 5 years of experience in software and/or platform engineering, with the capability to design, build, and maintain production-quality tools.

• Extensive knowledge in application security and vulnerability management—you are familiar with CVEs, dependency risks, container security, and SDLC integration, and you have insights on what is worth addressing versus what is extraneous.

• Practical experience with cloud infrastructure, preferably GCP/GKE or a similar platform, with the ability to adapt to our technology stack.

• A consistent habit of utilizing AI tools—coding assistants, LLMs—as an integral part of your building and analysis processes, rather than as a sporadic shortcut.

• A tendency toward automation—when encountering a repetitive manual task, your instinct is to develop a tool rather than create a runbook.

• Comfort with ambiguity and a sense of ownership—you will often be the sole person tackling a problem and will need to make judgment calls regarding priority, approach, and scope without awaiting direction.

• Experience in influencing engineering culture around security, with the ability to motivate developers to care without hindering their progress.

• Excellent written and verbal communication skills, including the capability to clearly convey our security posture to customers when necessary.

🏝️ Benefits

• Well-funded and established startup with grand ambitions, offering competitive salaries and pre-IPO equity packages.

• Hopper covers the cost of employee premiums for private medical and dental insurance.

• Hopper also provides private life and accident coverage.

• Inquire about our exceptionally generous parental leave policy, which exceeds industry standards!

• Access to co-working space on demand via FlexDesk and a work-from-home stipend.

• Unlimited PTO.

• Monthly cash allowances for gym memberships and to support home office expenses for a comfortable remote working environment.

• Carrot Cash travel stipend.

• An entrepreneurial culture where pushing boundaries and taking risks is part of daily operations.

• Open lines of communication with management and company leadership.

• Small, dynamic teams that make a significant impact.