Senior Security Engineer - Fully Remote (Spain)

Location: Fully remote within Spain; listed locations include Madrid, Barcelona, Valencia, and Zaragoza.

Salary: €55,000–€65,000 annually.

Company

hirify.global is a high-growth international B2B SaaS platform with AI-powered features that helps Community Managers work more efficiently.

What you will do

• Own application, cloud, AI, and platform security across the JavaEE/Spring Security/Vue monolith and AWS infrastructure.
• Harden Spring Security, JavaEE filters, CORS, anti-CSRF protections, cookie settings, CSP headers, HTTPS, Nginx, Tomcat, load balancers, and Docker environments.
• Threat-model and test AI/LLM features against prompt injection, data poisoning, data leakage, insecure output handling, and API abuse.
• Define and audit ISO 27001 and SOC 2 controls, collect technical evidence, lead audits, and assess third-party vendor risk.
• Conduct code, secrets, and dependency reviews across Maven and Node.js projects.
• Build automated SAST, DAST, and OWASP ZAP security checks into CI/CD pipelines while partnering with developers and leads.

Requirements

• Must be located in Spain.
• Senior-level ownership of security across application code, cloud infrastructure, and compliance.
• Professional fluency in Spanish and English is mandatory; language proficiency is checked during hiring.
• Experience with JavaEE, Spring Security, Vue.js, Node.js, Docker, OWASP ZAP, AWS, Linux, MySQL, Maven, and Git/Bitbucket.
• Understanding of the OWASP Top 10 for LLM Applications, AI data privacy, and secure API and prompt engineering.
• Knowledge of ISO/IEC 27001 ISMS controls, SOC 2 Type II Trust Services Criteria for security, availability, and confidentiality, and vendor risk assessments.
• Hands-on experience writing and reviewing code rather than focusing only on paper compliance.
• A pragmatic approach to applying security controls without unnecessary bureaucracy, curiosity about GenAI/LLM risks, and the ability to turn audit requirements into developer-friendly processes.

Culture and Benefits

• 100% remote work with flexible scheduling and collaboration when needed.
• Health insurance.
• Language lessons and an international working environment using English, Spanish, French, and German.
• Annual in-person team gathering.
• Growth opportunities in a fast-growing company with ownership-oriented work.

Hiring process

• First 30-minute interview with People & Culture covering culture fit, compensation alignment, and language proficiency.
• Second 60-minute interview covering SAST/DAST/ZAP tools, AI testing scenarios, and practical ISO 27001/SOC 2 cases.