> Markdown version of [/jobs/ext/3044322-security-engineer](https://www.wearedevelopers.com/jobs/ext/3044322-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Security Engineer - **Company:** Prima - **Location:** Madrid, Spain (Remote available) - **Salary:** €55,000.0 - €70,000.0 - **Contract:** Permanent contract - **Skills:** JavaScript (Programming Language), Artificial Intelligence, Amazon Web Services, Software as a Service, Cloud Computing Security, Cloud Engineering, Computer Programming, Continuous Integration, Github, Python (Programming Language), Systems Development Life Cycle, Software Engineering, Software Vulnerability Management, Software Organization, Large Language Models, Software Security, Kubernetes, Security Orchestration, Automation & Response - **Published:** September 24, 2026 - **Apply:** https://www.adzuna.es/contact-us.html ## About the Role Strong background in Application Security with hands-on experience in threat modelling, secure design reviews, vulnerability management, and security automation. Proven experience as a Security Engineer who has progressed into engineering leadership or management roles. 3+ years of people management experience, including hiring, mentoring, and performance management of senior security engineers. Deep technical understanding of modern software development practices, secure SDLC, and cloud-native architectures. Strong programming skills, particularly in Python and JavaScript. Experience with cloud platforms such as AWS and/or GCP, and familiarity with CI/CD tools such as GitHub Actions. Experience leading or significantly contributing to AppSec programmes in fast-scaling SaaS or AI-driven environments. Strong communication skills with the ability to engage across technical engineers, leadership, and cross-functional stakeholders. Practical experience embedding security as a collaborative partner within engineering teams rather than a gatekeeping function. Strong understanding of AI-native security challenges, including LLM-based systems, agentic tools, and AI-generated code risks. Familiarity with tools such as Semgrep, Wiz, CrowdStrike, HackerOne, or similar AppSec ecosystems is a plus. Kubernetes experience and prior Staff/Principal-level security engineering background are considered strong advantages. ## Description This role offers the opportunity to lead a highly skilled Application Security team at the forefront of securing AI-driven software development. You will shape how security is embedded across a rapidly scaling engineering organisation, ensuring secure-by-design principles are applied throughout the SDLC. Acting as both a technical leader and strategic enabler, you will guide senior engineers working on advanced AppSec challenges such as threat modelling, AI-assisted development security, and automated security tooling. The environment is highly collaborative and deeply technical, with strong emphasis on autonomy, trust, and impact. You will work closely with engineering, platform, and leadership teams to define scalable security practices that evolve alongside cutting-edge AI products. This is a high-impact leadership role where your decisions directly influence product security, engineering velocity, and organisational resilience. Accountabilities Lead, grow, and support a senior Application Security team, including hiring, onboarding, performance management, and career development. Enable a highly autonomous team of senior engineers by creating the right environment, structure, and operating rhythm for success. Define and evolve the Application Security strategy and roadmap, translating risk, engineering input, and business priorities into clear initiatives. Act as a hands-on technical partner in areas such as threat modelling, secure architecture design, and application risk analysis. Establish and maintain team planning processes, including OKRs, quarterly planning, and cross-functional coordination. Serve as the primary interface between AppSec and broader engineering, platform, legal, and leadership stakeholders. Drive integration of security into AI-assisted development workflows, including assessment of agentic coding tools and AI-generated code risks. Oversee AppSec alignment with broader security functions, ensuring consistent handling of incidents, risks, and cross-team initiatives. Represent the AppSec function in external contexts such as audits, compliance programmes (e.g., SOC2, ISO 42001), and customer engagements. Promote continuous improvement in AppSec tooling, automation, and security engineering practices. ## Related Videos - [Innovating Developer Tools with AI: Insights from GitHub Next](https://www.wearedevelopers.com/videos/1268-innovating-developer-tools-with-ai-insights-from-github-next) - [Understanding Kubernetes in a visual way](https://www.wearedevelopers.com/videos/100085-understanding-kubernetes-in-a-visual-way) - [The Cloud is Calling: Answer with In-Demand Skills](https://www.wearedevelopers.com/videos/945-the-cloud-is-calling-answer-with-in-demand-skills) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Real-World Security for Busy Developers](https://www.wearedevelopers.com/videos/1545-real-world-security-for-busy-developers) - [Bringing AI Model Testing and Prompt Management to Your Codebase with GitHub Models](https://www.wearedevelopers.com/videos/1536-bringing-ai-model-testing-and-prompt-management-to-your-codebase-with-github-models) ## Related Articles - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [The Ultimate Software Engineer Career Path Guide for 2023](https://www.wearedevelopers.com/magazine/146-the-ultimate-software-engineer-career-path-guide-for-2023)