Staff Security Engineer

This is a fully remote position, open to applicants in Spain.

📋 Description

• Take the lead in overseeing security throughout the organization.

• Strengthen cloud infrastructure and enforce least-privilege access protocols.

• Enhance secure delivery practices and manage vulnerabilities effectively.

• Perform penetration testing and manage incident response activities.

• Tackle risks associated with prompt injection, data exfiltration, cross-session access, and insecure code written by agents.

• Establish security priorities and ensure issues are resolved through confirmed completion.

• Detect application vulnerabilities via code reviews, penetration tests, and agent-specific red-team exercises.

• Work collaboratively with ITOps, platform, and product engineers to fortify infrastructure and secure delivery pipelines.

• Develop detection mechanisms for user and agent activities.

• Integrate automated security controls into current workflows and evaluate their effectiveness.

⛳️ Requirements

• Strong background in application security.

• Practical experience in penetration testing and offensive security for web applications, APIs, and cloud infrastructure.

• Solid understanding of infrastructure and cloud security principles, including IAM, network segmentation, containers and isolation, secrets management, and logging.

• Proven experience in building detection systems and managing incident response.

• Proficiency with AI coding agents and systems based on large language models (LLMs).

• Software engineering skills for developing tools, automation, and testing frameworks.

• Capability to assess risks in relation to releases and articulate security decisions.

• Experience in securing sandboxed or multi-tenant code execution environments (preferred).

• A track record in red-teaming, bug bounty programs, or capture-the-flag (CTF) events (preferred).

• Familiarity with ISO 27001 and SOC 2 security programs and compliance frameworks (preferred).

🏝️ Benefits

• Equity options available.

• Remote-first work setup.

• Global hiring that prioritizes talent over geographical location.

• Barcelona hub with weekly co-working opportunities.

• Genuine scope for autonomy and ownership.

• Direct collaboration with senior team members and the founder.

• AI-focused work environment.

• Commitment to an equal-opportunity and inclusive workplace.