Senior Security Engineer

This is a fully remote position, open to applicants in Spain.

📋 Description

• Safeguard the cloud-based platform along with its foundational infrastructure.

• Assess and strengthen the cloud environment while enhancing security architecture.

• Conduct vulnerability management across cloud workloads, servers, endpoints, containers, and applications, from scanning and prioritizing risks to remediation.

• Threat model features based on AI/ML and LLM, as well as internal AI tools.

• Evaluate AI vendors, models, and third-party AI services.

• Collaborate with AI governance to enforce approved-use standards, data classification, access controls, and logging practices.

• Ensure compliance with ISO/IEC 42001, NIST AI RMF, and OWASP Top 10 for LLM Applications.

• Design and enhance cloud security architecture, covering IAM, network segmentation, secrets management, encryption, and tenant isolation.

• Review AWS and Azure configurations against CIS Benchmarks and best practices set by providers.

• Utilize CSPM and configuration monitoring tools for ongoing security assessments.

• Keep track of security advisories and patch-related risks, coordinating responses with IT.

• Engage in incident response activities, including triage, investigation, containment, and recovery.

• Perform root-cause analysis and lead post-incident reviews and documentation.

• Develop detection and monitoring systems for platform and AI environments, enhancing alerting and runbooks.

• Monitor incident trends and report findings to IT and operations leadership.

• Automate the collection of evidence, vulnerability triage, alert enrichment, ticketing, and reporting using scripting and AI agents.

• Create integrations between security tools and remediation teams.

• Assess and safely implement AI-assisted security workflows with guardrails, logging, and human oversight.

• Provide support for security controls and documentation required for SOC 2, ISO 27001, ENS, and other customer and regulatory standards.

• Contribute to M&A integration and vendor or entity separation efforts.

• Offer security advice to Infrastructure, Platform, and IT teams.

• Report on risk, posture, and progress to IT and operations leadership.

⛳️ Requirements

• Over 5 years of experience in security engineering, cloud security, and infrastructure and platform security.

• Practical experience in reviewing and securing cloud configurations in AWS and/or Azure.

• Proficiency with vulnerability management tools and processes, including scanning, risk-based prioritization, and tracking remediation across cloud workloads, servers, endpoints, and containers.

• Experience in investigating and documenting security incidents, including root cause analysis and post-incident reviews.

• Familiarity with the construction and deployment of LLMs and AI applications, along with their unique risks (such as prompt injection, data exfiltration, excessive agency, and insecure output handling).

• Strong foundation in secure design, network security, IAM, and cryptography principles.

• Skills in scripting or automation (Python, Bash, AI agents, etc.).

• Experience with at least one compliance framework (SOC 2, ISO 27001, FedRAMP/GovRAMP, NIST 800-53, or similar).

• Ability to communicate clearly with both technical and non-technical stakeholders.

• Relevant certifications are advantageous, including CISSP, CCSP, AWS/Azure security, GIAC, or AI-security specialty credentials.

• Experience with AI governance or AI risk management is a plus.

• Background in AI/ML red-teaming or adversarial testing is a plus.

• Familiarity with CSPM, SIEM, or EDR tools is beneficial.

• Knowledge of Windows and Linux server hardening and patch management is advantageous.

• Experience supporting government, utility, or other regulated-industry clients is beneficial.

🏝️ Benefits

• Competitive annual salary.

• Private health insurance.

• Flexible benefits plan that allows you to customize part of your compensation package to meet your personal needs.

• Annual bonus based on individual performance and company results.

• Flexible working hours.

• Remote work options.