Senior Security Engineer

OverviewThis position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Security Engineer based in Spain.This role sits at the core of securing a complex, cloud-native cybersecurity platform used by enterprises and government organizations to detect and respond to real-world adversary activity. You will take full ownership of application and cloud security across a fast-moving engineering environment, directly shaping how security is embedded into products, infrastructure, and delivery pipelines. The position is highly hands-on, focused on building, implementing, and improving security controls rather than advising from the sidelines. You will work closely with engineering, DevOps, and product teams to ensure secure design, resilient architecture, and effective threat detection across AWS and Kubernetes environments. In addition, you will play a key role in compliance programs such as SOC 2 and ISO ***** while supporting customer trust and audit processes. This is a leadership role with direct responsibility for mentoring a security engineer and acting as a technical escalation point for security incidents. The environment is fast-paced, mission-driven, and highly collaborative.ResponsibilitiesLead application security efforts across the product, including threat modeling, secure design reviews, and hands-on vulnerability remediation with engineering teamsDesign, implement, and maintain secure SDLC practices by embedding security into CI/CD pipelines, including SAST, DAST, dependency scanning, and secrets detectionBuild and manage security tooling and policy-as-code controls across Terraform/Terragrunt-based infrastructure pipelinesIdentify, validate, prioritize, and remediate vulnerabilities across applications, APIs, cloud infrastructure, and third-party integrationsOwn cloud security across AWS and Kubernetes, including IAM design, network security, encryption, logging, and configuration drift managementDevelop and tune detection and response capabilities using tools such as CloudTrail, GuardDuty, and Security Hub, and lead security incident response activitiesDrive SOC 2 and ISO ***** compliance programs, including control design, audit coordination, and documentation ownershipSupport customer trust initiatives by responding to security questionnaires and explaining technical controls during audits and evaluationsManage and mentor an internal Security Engineer responsible for corporate IT, identity, and endpoint securityRequirementsYou are a hands-on security engineer with deep technical expertise in cloud and application security, comfortable operating directly within code, infrastructure, and CI/CD pipelines. You combine strong execution skills with the ability to guide security strategy in a product-driven environment.5+ years of experience in security engineering, application security, DevSecOps, or cloud security rolesStrong hands-on experience with AWS and Kubernetes security in production environmentsDeep understanding of secure SDLC practices and CI/CD security integrationAbility to read, review, and work directly with application code and APIs for security remediationExperience implementing SAST, DAST, container scanning, and secrets management toolsProven experience with SOC 2 and/or ISO ***** compliance programs, including audit collaborationStrong knowledge of IAM, network security, encryption, logging, and cloud security posture managementExperience working with incident response, detection engineering, and security monitoring toolsLeadership experience, including mentoring or managing security engineersStrong communication skills, able to translate technical risk for engineers, leadership, and auditorsComfortable working in Atlassian tools (Jira, Confluence) and modern SaaS engineering environmentsOpen and practical mindset toward AI tools and their use in security workflowsBenefitsFully remote-friendly role with flexible working arrangementsCompetitive compensation aligned with market standardsWellness programs and employee support initiativesStrong focus on learning, certifications, and professional developmentInclusive, collaborative, and mission-driven work cultureOpportunity to work on high-impact cybersecurity problems at scaleEmployee recognition programs and long-term growth opportunitiesHow Jobgether WorksWe use anAI-powered matching processto ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.We appreciate your interest and wish you the best!Data Privacy NoticeBy submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.#J-*****-Ljbffr

You are a hands-on security engineer with deep technical expertise in cloud and application security, comfortable operating directly within code, infrastructure, and CI/CD pipelines. You combine strong execution skills with the ability to guide security strategy in a product-driven environment. 5+ years of experience in security engineering, application security, DevSecOps, or cloud security roles Strong hands-on experience with AWS and Kubernetes security in production environments Deep understanding of secure SDLC practices and CI/CD security integration Ability to read, review, and work directly with application code and APIs for security remediation Experience implementing SAST, DAST, container scanning, and secrets management tools Proven experience with SOC 2 and/or ISO ***** compliance programs, including audit collaboration Strong knowledge of IAM, network security, encryption, logging, and cloud security posture management Experience working with incident response, detection engineering, and security monitoring tools Leadership experience, including mentoring or managing security engineers Strong communication skills, able to translate technical risk for engineers, leadership, and auditors Comfortable working in Atlassian tools (Jira, Confluence) and modern SaaS engineering environments Open and practical mindset toward AI tools and their use in security workflows

Fully remote-friendly role with flexible working arrangements Competitive compensation aligned with market standards Wellness programs and employee support initiatives Strong focus on learning, certifications, and professional development Inclusive, collaborative, and mission-driven work culture Opportunity to work on high-impact cybersecurity problems at scale Employee recognition programs and long-term growth opportunities How Jobgether Works We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best! Data Privacy Notice By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time. We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us. #J-*****-Ljbffr