{"id":2142717,"url":"https://alion.io/job/factorial-offensive-security-engineer","title":"Offensive Security Engineer","company":{"id":53702,"name":"Factorial","domain":"factorialhr.com","url":"https://alion.io/company/factorial","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Factorial","truth_index":{"grade":"A","score":95,"open_postings":120,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":567,"computed_at":"2026-10-14T06:34:16Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Barcelona, Spain"],"countries":["ES"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":40000,"max":55000,"currency":"EUR","period":"year","gross":null,"usd_annual":61597},"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agentic Workflows","optional":false},{"name":"Agile","optional":false},{"name":"CI/CD","optional":false},{"name":"CVSS","optional":false},{"name":"LLM","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"Python","optional":false},{"name":"RAG","optional":false},{"name":"Ruby","optional":false},{"name":"Ruby on Rails","optional":false}],"status":"live","first_seen_at":"2026-09-01T00:00:00Z","employer_posted_date":"2026-10-09","last_verified_at":"2026-10-14T08:26:48Z","board_verified":true,"closed_at":null,"days_open":43,"trust":{"level":"ok","repost_count":0,"flags":["company_stale"],"days_open":43},"description":"Hey there, Cybersecurity Enthusiasts!\nAt Factorial, we're on the hunt for a skilled Application Security Engineer to join our Security Team. We need your expertise to proactively hunt for vulnerabilities and strengthen our defenses against cyber threats. If you have a passion for ethical hacking and want to make an impact in a dynamic tech environment, we'd love to hear from you!\nReady to be part of the challenge?\nAbout the team\nSecurity at Factorial works side by side with Product and Engineering to help a fast-moving, AI-native company ship without losing control of risk. Our mission is to protect Factorial and our customers while making security a practical part of how software is designed, built, tested, and operated.\nThe work goes far beyond finding vulnerabilities: we test real product surfaces, help teams fix issues properly, and turn repeated security needs into guardrails, automation, and CI/CD controls that developers can use every day. AI is part of Factorial’s culture, product, and way of working from day one, so Security also helps define how teams use agents, LLMs, tools, and company data safely at scale, while actively challenging those systems with an attacker mindset.\nIt’s a team for people who want to keep learning, move across different security problems, and build security that can keep up with the speed of the company.\nWhat You’ll be doing?\nPerform proactive penetration testing across Factorial’s applications, APIs, infrastructure, and AI-powered features.\n\nReproduce and validate vulnerability reports submitted by third parties, like our bug bounty program.\n\nCollaborate with development teams to remediate security findings and enhance secure coding practices.\n\nImprove how we validate, triage, and remediate vulnerabilities from bug bounty reports, internal testing, automated controls, and external research.\n\nHunt for recurring or legacy vulnerability patterns based on root cause analysis, previous incidents, and security findings.\n\nBuild and improve security automations, agents, skills, and CI/CD controls that help engineering teams catch and fix issues earlier.\n\nHelp secure Factorial’s use of AI across product and internal workflows, including LLMs, agents, data access, tools, permissions, and abuse scenarios.\n\nContribute to the development of our security tools, automations, and infrastructure.\n\nStay up-to-date with the latest security research, threats, attack techniques, and emerging AI security risks.\n\nWhat are we looking for?\nYou have 3+ years of professional experience in Application Security, Offensive Security, or Penetration Testing. Web Application Penetration Testing experience is mandatory.\n\nYou hold a degree in Engineering or Computer Science and have strong knowledge of web applications, databases, network protocols, and operating systems.\n\nYou possess strong knowledge in cybersecurity fundamentals, CVSS, testing methodologies, and tooling.\n\nYou are fluent with scripting or programming languages used in security testing and automation, such as Python or Bash.\n\nYou are technical, curious, and comfortable moving across different security problems instead of specializing in only one area.\n\nYou like to attack systems, but you also enjoy building tools, automations, guardrails, and practical solutions that make security scale.\n\nYou do not need to be an expert in every technology, but you should be able to reason critically, learn fast, use AI effectively, and design pragmatic solutions.\n\nYou have curiosity and willingness to learn about AI security topics such as LLM testing, prompt injection, agentic workflows, data exposure, tool permissions, RAG security, and secure AI adoption.\n\nCertifications like BSCP or eWPTX are highly regarded but not mandatory.\n\nExperience with Ruby / Ruby on Rails applications is highly regarded, but not mandatory.\n\nFluency in English is required.\n\nCompensation\nAt Factorial we don't evaluate you by years of experience but by your knowledge and skills.\nWe use our Career Path with a rubric framework where we define what is expected for each experience level and skill. This framework allows you to know your current level and what you need to keep growing. We love transparency, so our Career Path includes the salaries for each level, which we share during the first interview to ensure alignment.\nThe salary range for this position is between 40.000 - 55.000€ base + 7-10%variable based on performance payed quarterly +ESOP plan.\nHow We Work\nAt Factorial, we believe the best products are built when people come together-in person-to collaborate, challenge ideas, and move fast. That’s why our Engineering Team follows an office-first, flexible approach.\nWe work on-site several days a week (80%), using that time to connect, align, and innovate as a team. However, we also understand the importance of focus and flexibility, so we support remote work when it makes sense (20%), whether for deep work, personal needs, or just a change of scenery.\nThis balance helps us stay agile, creative, and closely connected, while giving everyone the space to do their best work.\nOur Hiring Process\nIntro Call → Chat with our Talent Partner about your journey and goals.\n\nHiring Manager Interview → Deep dive into your product mindset, teamwork, and problem-solving.\n\nTechnical Interview → A collaborative technical discussion based on real-life problems.\n\nFinal Coffee Chat → A relaxed conversation with our CTO & VP of Engineering to explore our vision, culture, and your growth.\n\nThe whole process is remote, using videoconferencing tools!\nAbout Factorial\nFactorial is the AI for Business that knows companies, connects how work happens across the business, and turns that context into action.\nFounded in Barcelona in 2016, we now have +1,700 employees serving more than 16,000 companies across 112 countries.\nFactorial started with a simple idea: companies were spending too much time managing processes and not enough time doing the work they were hired to do: their best work.\nBut as companies grow, work gets more disconnected. More people, more tools, more information, and more time spent connecting the dots. Generic AI can answer questions, but it doesn’t know your company. Every time, you have to give it the context.\nFactorial is different. Because it’s inside the company, it already knows how it works, including its people, processes, policies, and data. So you can ask it to do real work, from screening candidates and managing expenses to answering questions and creating reports.\nAI isn’t the goal. Giving people back their time is.\nWhen work changes, so do we.\nWe believe in diverse talent: we welcome applicants from all backgrounds and strongly encourage people of diverse experiences and identities to apply.\nWe believe in inclusion: we are committed to equal opportunities and actively promote workplace inclusion of people with disabilities. If you would like to learn more about our inclusive recruitment processes, you are welcome to indicate so optionally and we will share additional information with you.\nOur Values\nWe own it: We take responsibility for every project. We make decisions, not excuses.\n\nWe learn and teach: We're dedicated to learning something new every day and, above all, share it.\n\nWe partner: Every decision is a team decision. We trust each other.\n\nWe grow fast: We act fast. We think that the worst mistake is not learning from them.\n\nWanna learn more about us? Check our website!\nPerks of being part of Factorial\nHigh growth, multicultural and friendly environment\n\nCompetitive ESOP plan\n\nAlan as private health insurance\n\nHealthy life with Wellhub (Gyms, pools, outdoor classes)\n\nSave expenses with Cobee\n\nLanguage classes\n\nBreakfast in the office and organic fruit\n\nFood discounts with Nora\n\nPet Friendly\n\nMuch more that we'll spill during the interview process!","description_format":"text","description_chars":7839,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[{"language":"English","level":"Advanced (C1)","optional":false}]},"benefits":["Health insurance","Pet friendly"],"hiring_locations":[{"name":"Spain","iso":"ES","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Penetration Testing","Artificial Intelligence","Professional Services","Software"],"lifecycle":[{"event":"open","at":"2026-10-09T03:51:17Z"}],"visa":[],"liveness":{"score":72,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":0.8,"age_days":43,"expected_fill_days":567,"reasons":["conf:3","velocity","win:early","crowd:brand"],"computed_at":"2026-10-14T06:34:16Z"},"pay":{"stated_usd_annual":61597,"is_top_pay":false},"html_url":"https://alion.io/job/factorial-offensive-security-engineer","json_url":"https://alion.io/job/factorial-offensive-security-engineer.json","meta":{"generated_at":"2026-10-14T11:45:04Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":14081,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-15T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":53702},"rest":"https://alion.io/mcp/rest/get_company?id=53702"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ffactorial-offensive-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ffactorial-offensive-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ffactorial-offensive-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/factorial-offensive-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ffactorial-offensive-security-engineer"}]}