> Markdown version of [/jobs/ext/4598119-security-engineer](https://www.wearedevelopers.com/jobs/ext/4598119-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Security Engineer

- **Company:** Ersilia
- **Location:** Barcelona, Spain (Remote available)
- **Contract:** Permanent contract
- **Skills:** Software System Penetration Testing, Code Review, Anti-Phishing, Software Vulnerability Management, Scripting, Software Security
- **Published:** November 6, 2026
- **Apply:** https://www.jobleads.com/es/job/security-engineer--barcelona--ec72783827c97592df3525955fd6b7ee8

## About the Role

* 5 years in a security environment working in a startup or scale up.
 * Solid experience in application security (code review, vulnerability management)
 * Experience coordinating or conducting penetration tests / security audits
 * Comfortable shipping code and working with Git/GitHub workflows
 * Scripting/automation skills

This is a fully remote position which can be based globally given a +-4 hour time difference within the CET region.

## Description

We are looking for a Security Engineer who can move fast, test aggressively and scale what works. you will take ownership of protecting our product, our users, and our collaborators as we scale a fast.

Your responsibilities:

 * Perform weekly code reviews to catch vulnerabilities before they ship
 * Track, prioritize, and drive remediation of security vulnerabilities across the stack
 * Coordinate external security audits and penetration tests, and follow through on findings
 * Maintain and evolve our risk register, mapping all company services and prioritizing what's exposed
 * Support audit follow-up and keep GRC documentation up to date
 * Communicate new threats to the team, document findings, and broadcast security updates company-wide
 * Run phishing simulations
 * Own the monitoring of security channels and alerts, including weekend coverage, so nothing goes unanswered
 * Set up and secure new employee devices (MDM), manage access provisioning / deprovisioning
 * Keep an eye on emerging attack techniques targeting generative AI
 * Track security incidents and vulnerabilities disclosed

What we are looking for:

 * 5 years in a security environment working in a startup or scale up.
 * Solid experience in application security (code review, vulnerability management)
 * Experience coordinating or conducting penetration tests / security audits
 * Comfortable shipping code and working with Git/GitHub workflows
 * Scripting/automation skills

This is a fully remote position which can be based globally given a +-4 hour time difference within the CET region.