Senior Security Engineer (Spain Only)

ABOUT THE ROLE

We are looking for a Senior Security Engineer to join our Information Security team and help protect our cloud-hosted platform and the infrastructure behind it. This is a hands-on role with broad scope across cloud and infrastructure security, AI security, vulnerability management, incident response, and security automation.

You will review and harden our cloud environment, improve its security architecture, and run vulnerability management across cloud workloads, servers, endpoints, and containers, from scanning and risk-based prioritization through to remediation. As our use of AI grows, you will model AI features and internal AI tools from a threat perspective, review AI vendors and services, and help turn AI governance into practical controls. You will also take part in incident response, investigate root causes, contribute to post-incident reviews, and strengthen detection and monitoring based on what we learn.

A key part of the role is automation: replacing repetitive manual work with integrations and workflows that keep security continuous rather than point-in-time. You will work closely with our Infrastructure, Platform, and IT teams as a trusted security advisor, and report on risk and posture to leadership.

RESPONSABILITIES

AI Security

• Threat model of AI/ML and LLM-based features and internal AI tools, including prompt injection, data leakage, model and supply-chain risk, insecure tool or agent permissions, and abuse of connectors and integrations.
• Run security reviews of AI vendors, models, and third-party AI services, covering data handling, retention, training-use terms, and subprocessors.
• Partner with AI governance to put policy into practice: approved-use standards, data classification for AI use, access controls, and logging.
• Support alignment with AI management and risk frameworks (ISO/IEC 42001, NIST AI RMF, OWASP Top 10 for LLM Applications).

Platform, Cloud & Infrastructure Security

• Design and improve security architecture for our cloud-hosted platform, including identity and access management, network segmentation, secrets management, encryption, and tenant isolation.
• Review cloud configurations (AWS and Azure) against security baselines such as CIS Benchmarks and cloud provider best practices. Identify misconfigurations, excessive permissions, exposed services, and drift, and work with IT and engineering to fix them.
• Use cloud security posture management (CSPM) and configuration monitoring tools to keep reviews continuous rather than point-in-time.
• Run vulnerability management across cloud workloads, servers, endpoints, containers, and applications: scan, triage, prioritize by real-world risk and exposure, and track remediation to closure.
• Monitor security advisories and patch-related risk (including post-patch failures) affecting our systems and stack, and coordinate response with IT.

Incident Response & Review

• Participate in security incident response: triage, investigation, containment, and recovery.
• Review security and operational incidents, including those that start as IT or system failures, to determine root cause, security impact, and whether other systems are exposed to the same issue.
• Lead post-incident reviews and write-ups with clear findings, corrective actions, and follow-up audits of similar systems.
• Build detection and monitoring for the platform and AI systems, and improve alerting and runbooks based on lessons learned.
• Track incident trends and report them to IT and operations leadership.

Security Automation

• Automate repetitive security work such as evidence collection, vulnerability triage, alert enrichment, ticketing, and reporting, with scripting and AI agents.
• Build integrations between security tools and the teams that act on their findings, so remediation flows without manual handoffs.
• Evaluate and safely adopt AI-assisted security workflows, with appropriate guardrails, logging, and human oversight.

Compliance & Customer Assurance

• Support the security controls and evidence behind customer and regulatory requirements (for example SOC 2, ISO 27001, and regional frameworks such as ENS) and use compliance automation tooling to keep controls continuously monitored.
• Contribute to security aspects of M&A integration and vendor or entity separation work.

Collaboration & Leadership

• Act as a security advisor to infrastructure, platform and IT teams.
• Report on risk, posture, and progress to IT and operations leadership.

REQUIREMENTS

• 5+ years in security engineering, cloud security, infrastructure and platform security.
• Hands-on experience reviewing and hardening cloud configurations in AWS and/or Azure.
• Experience with vulnerability management tools and processes, including scanning, risk-based prioritization, and remediation tracking across cloud workloads, servers, endpoints, and containers.
• Experience investigating and documenting security incidents, including root cause analysis and post-incident reviews.
• Working knowledge of how LLMs and AI applications are built and deployed, and of their distinct risks (prompt injection, data exfiltration, excessive agency, insecure output handling).
• Strong grounding in secure design, network security, IAM, and cryptography fundamentals.
• Scripting or automation skills (Python, Bash, AI agents, etc.).
• Experience with at least one compliance framework (SOC 2, ISO 27001, FedRAMP/GovRAMP, NIST 800-53 or similar).
• Clear communication with both technical and non-technical audiences.

NICE TO HAVE

• Experience with AI governance or AI risk management (ISO 42001, NIST AI RMF, EU AI Act awareness).
• Background in AI/ML red-teaming or adversarial testing.
• Experience with CSPM, SIEM, or EDR tooling.
• Familiarity with Windows and Linux server hardening and patch management.
• Experience supporting government, utility, or other regulated-industry customers.
• Relevant certifications (CISSP, CCSP, AWS/Azure security, GIAC, or AI-security specialty credentials).

BENEFITS

• Competitive annual salary.
• Private health insurance and a flexible benefits plan, allowing you to tailor part of your compensation package to your personal needs.
• Annual bonus based on individual performance and company results.
• Flexible working hours.
• Remote work options.

At Technosylva, we value diverse experiences and skills, and we understand that every career path is unique. We encourage anyone who believes they meet most of the requirements and is interested in growing and contributing in this role to apply.

DISCLAIMER

Final salary and benefits will depend on a variety of factors, including location, experience, training, qualifications, and market conditions.

EQUAL OPPORTUNITY STATEMENT

Technosylva is an Equal Opportunity Employer. We are committed to fostering an inclusive environment where diverse perspectives lead to better solutions.