Security Engineer (Remote - Spain)

Role overview Own application security for a growing AI powered web product, working hands on across code review, vulnerability discovery, and remediation. You will set priorities and guide security work independently, while accounting for AI specific risks such as prompt injection and content filter bypass.

Responsibilities - Review application code regularly, identify meaningful vulnerabilities, and work with engineers to resolve them. - Coordinate external security audits and penetration tests; assess findings and track fixes through completion. - Build scripts and tools to automate security work, using AI tools in code review, testing, and scripting. - Set security priorities, explain technical risks in plain language, and respond to security alerts, including occasional night or weekend on call. - Maintain basic risk and governance documentation, share security updates, and run awareness sessions. - Monitor threats affecting AI systems, including jailbreaks, prompt injection, and moderation bypasses.

Requirements - At least two years of practical security experience, including regular application security reviews or testing. - A demonstrated example of finding and helping fix a real vulnerability; compliance work alone is not sufficient. - Experience coordinating an external audit or penetration test and carrying findings through to remediation. - Ability to work with Git or GitHub, script in Python or Bash, and recent hands on experience with a modern web stack and cloud environment. - Experience owning security work with limited support, prioritizing risks, and communicating them to nontechnical colleagues. - Regular use of AI tools in security work and comfort testing systems to uncover weaknesses.

Benefits and work setup The position is fully remote and open to work from anywhere. A B2B arrangement is preferred, with flexibility for a long term commitment. The package includes 20 working days of paid time off, a yearly in person team gathering, a monthly health insurance allowance, wellbeing sessions, a coworking budget, professional development funds, and equipment and AI tool access. The role involves working with uncensored AI generated content.