{"id":4016431,"url":"https://alion.io/job/techno-sylva-senior-security-engineer-spain-only","title":"Senior Security Engineer (Spain Only)","company":{"id":689495,"name":"Techno Sylva","domain":"technosylva.com","url":"https://alion.io/company/technosylva","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"BambooHR","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Spain"],"countries":["ES"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Bash","optional":false},{"name":"CIS Benchmarks","optional":false},{"name":"FedRAMP","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"LLM","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"NIST 800-53","optional":false},{"name":"NIST AI RMF","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Python","optional":false},{"name":"SOC 2","optional":false},{"name":"EU AI Act","optional":true},{"name":"ISO 42001","optional":true},{"name":"Linux","optional":true},{"name":"SIEM","optional":true},{"name":"Windows","optional":true}],"status":"live","first_seen_at":"2026-11-10T12:58:24Z","employer_posted_date":"2026-11-10","last_verified_at":"2026-11-10T12:58:24Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"ABOUT THE ROLE\nWe are looking for a Senior Security Engineer to join our Information Security team and help protect our cloud-hosted platform and the infrastructure behind it. This is a hands-on role with broad scope across cloud and infrastructure security, AI security, vulnerability management, incident response, and security automation.\nYou will review and harden our cloud environment, improve its security architecture, and run vulnerability management across cloud workloads, servers, endpoints, and containers, from scanning and risk-based prioritization through to remediation. As our use of AI grows, you will model AI features and internal AI tools from a threat perspective, review AI vendors and services, and help turn AI governance into practical controls. You will also take part in incident response, investigate root causes, contribute to post-incident reviews, and strengthen detection and monitoring based on what we learn.\nA key part of the role is automation: replacing repetitive manual work with integrations and workflows that keep security continuous rather than point-in-time. You will work closely with our Infrastructure, Platform, and IT teams as a trusted security advisor, and report on risk and posture to leadership.\nRESPONSABILITIES\nAI Security\nThreat model of AI/ML and LLM-based features and internal AI tools, including prompt injection, data leakage, model and supply-chain risk, insecure tool or agent permissions, and abuse of connectors and integrations.\nRun security reviews of AI vendors, models, and third-party AI services, covering data handling, retention, training-use terms, and subprocessors.\nPartner with AI governance to put policy into practice: approved-use standards, data classification for AI use, access controls, and logging.\nSupport alignment with AI management and risk frameworks (ISO/IEC 42001, NIST AI RMF, OWASP Top 10 for LLM Applications).\nPlatform, Cloud & Infrastructure Security\nDesign and improve security architecture for our cloud-hosted platform, including identity and access management, network segmentation, secrets management, encryption, and tenant isolation.\nReview cloud configurations (AWS and Azure) against security baselines such as CIS Benchmarks and cloud provider best practices. Identify misconfigurations, excessive permissions, exposed services, and drift, and work with IT and engineering to fix them.\nUse cloud security posture management (CSPM) and configuration monitoring tools to keep reviews continuous rather than point-in-time.\nRun vulnerability management across cloud workloads, servers, endpoints, containers, and applications: scan, triage, prioritize by real-world risk and exposure, and track remediation to closure.\nMonitor security advisories and patch-related risk (including post-patch failures) affecting our systems and stack, and coordinate response with IT.\nIncident Response & Review\nParticipate in security incident response: triage, investigation, containment, and recovery.\nReview security and operational incidents, including those that start as IT or system failures, to determine root cause, security impact, and whether other systems are exposed to the same issue.\nLead post-incident reviews and write-ups with clear findings, corrective actions, and follow-up audits of similar systems.\nBuild detection and monitoring for the platform and AI systems, and improve alerting and runbooks based on lessons learned.\nTrack incident trends and report them to IT and operations leadership.\nSecurity Automation\nAutomate repetitive security work such as evidence collection, vulnerability triage, alert enrichment, ticketing, and reporting, with scripting and AI agents.\nBuild integrations between security tools and the teams that act on their findings, so remediation flows without manual handoffs.\nEvaluate and safely adopt AI-assisted security workflows, with appropriate guardrails, logging, and human oversight.\nCompliance & Customer Assurance\nSupport the security controls and evidence behind customer and regulatory requirements (for example SOC 2, ISO 27001, and regional frameworks such as ENS) and use compliance automation tooling to keep controls continuously monitored.\nContribute to security aspects of M&A integration and vendor or entity separation work.\nCollaboration & Leadership\nAct as a security advisor to infrastructure, platform and IT teams.\nReport on risk, posture, and progress to IT and operations leadership.\nREQUIREMENTS\n5+ years in security engineering, cloud security, infrastructure and platform security.\nHands-on experience reviewing and hardening cloud configurations in AWS and/or Azure.\nExperience with vulnerability management tools and processes, including scanning, risk-based prioritization, and remediation tracking across cloud workloads, servers, endpoints, and containers.\nExperience investigating and documenting security incidents, including root cause analysis and post-incident reviews.\nWorking knowledge of how LLMs and AI applications are built and deployed, and of their distinct risks (prompt injection, data exfiltration, excessive agency, insecure output handling).\nStrong grounding in secure design, network security, IAM, and cryptography fundamentals.\nScripting or automation skills (Python, Bash, AI agents, etc.).\nExperience with at least one compliance framework (SOC 2, ISO 27001, FedRAMP/GovRAMP, NIST 800-53 or similar).\nClear communication with both technical and non-technical audiences.\nNICE TO HAVE\nExperience with AI governance or AI risk management (ISO 42001, NIST AI RMF, EU AI Act awareness).\nBackground in AI/ML red-teaming or adversarial testing.\nExperience with CSPM, SIEM, or EDR tooling.\nFamiliarity with Windows and Linux server hardening and patch management.\nExperience supporting government, utility, or other regulated-industry customers.\nRelevant certifications (CISSP, CCSP, AWS/Azure security, GIAC, or AI-security specialty credentials).\nBENEFITS\nCompetitive annual salary.\nPrivate health insurance and a flexible benefits plan, allowing you to tailor part of your compensation package to your personal needs.\nAnnual bonus based on individual performance and company results.\nFlexible working hours.\nRemote work options.\nAt Technosylva, we value diverse experiences and skills, and we understand that every career path is unique. We encourage anyone who believes they meet most of the requirements and is interested in growing and contributing in this role to apply.\nDISCLAIMER\nFinal salary and benefits will depend on a variety of factors, including location, experience, training, qualifications, and market conditions.\nEQUAL OPPORTUNITY STATEMENT\nTechnosylva is an Equal Opportunity Employer. We are committed to fostering an inclusive environment where diverse perspectives lead to better solutions.","description_format":"text","description_chars":6806,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Flexible schedule","Health insurance"],"hiring_locations":[{"name":"Spain","iso":"ES","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Artificial Intelligence","Cybersecurity","Predictive Analytics","Incident Response"],"lifecycle":[{"event":"open","at":"2026-11-10T12:58:24Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":54,"reasons":["conf:2","win:early"],"computed_at":"2026-11-10T15:49:34Z"},"pay":null,"html_url":"https://alion.io/job/techno-sylva-senior-security-engineer-spain-only","json_url":"https://alion.io/job/techno-sylva-senior-security-engineer-spain-only.json","meta":{"generated_at":"2026-11-10T15:49:34Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":2332,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-11T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":689495},"rest":"https://alion.io/mcp/rest/get_company?id=689495"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ftechno-sylva-senior-security-engineer-spain-only"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ftechno-sylva-senior-security-engineer-spain-only"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ftechno-sylva-senior-security-engineer-spain-only"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/techno-sylva-senior-security-engineer-spain-only\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ftechno-sylva-senior-security-engineer-spain-only"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4016431}},{"tool":"search_jobs","arguments":{"company":"technosylva.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4016431},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}