Air Apps

security engineer for AI-powered resource planning

In short

Security engineer role at Air Apps, a self-funded company building an AI-powered Personal & Entrepreneurial Resource Planner with over 100 million downloads worldwide. The role covers threat modeling, vulnerability scanning, penetration testing, DevSecOps integration into CI/CD, compliance (ISO 27001, GDPR, SOC 2), IAM design, and incident response, working onsite in Barcelona. Requires around 4+ years of cybersecurity/application security experience, strong scripting skills (Python, Bash, or PowerShell), and hands-on experience with cloud security (AWS, Azure, or GCP) and SIEM/IDS tools.

Описание
Air Apps is developing an AI-powered Personal & Entrepreneurial Resource Planner (PRP). Founded in 2018, the self-funded company has reached over 100 million downloads worldwide.
Задачи
•Develop and implement threat modeling to identify security risks across applications and infrastructure
•Conduct vulnerability scanning, penetration testing, and security assessments to detect weaknesses
•Define and enforce secure coding practices with development teams
•Integrate security into CI/CD pipelines and automate security testing with DevOps
•Monitor and respond to security incidents, conduct root cause analysis, and implement preventative measures
•Ensure compliance with security standards and regulations, including ISO 27001, GDPR, and SOC 2
•Design and implement IAM policies, encryption standards, and authentication mechanisms
•Conduct security reviews of features, APIs, and third-party integrations with product teams
•Develop incident response plans, security documentation, and best practices
•Stay informed about emerging threats, vulnerabilities, and security technologies
Требования
•Around 4+ years of experience in cybersecurity, application security, or security engineering
•Strong knowledge of secure coding principles, OWASP Top 10, and threat modeling techniques
•Experience with vulnerability scanning tools and penetration testing methodologies
•Hands-on experience with SIEM, intrusion detection systems (IDS), and security monitoring tools
•Proficiency in Python, Bash, or PowerShell scripting and automation for security tasks
•Familiarity with cloud security in AWS, Azure, or GCP, including IAM and workload protection
•Knowledge of encryption protocols, network security, and API security best practices
•Experience with DevSecOps and integrating security into CI/CD pipelines
•Ability to analyze security logs, detect anomalies, and mitigate potential threats
•Strong problem-solving skills and ability to communicate security concepts to non-technical stakeholders
Условия
•Relocation support is available
•Apple hardware ecosystem for work
•Annual Bonus
•Top-tier Health and Life Insurance
•Transportation Budget
•Coverflex benefits package for meal allowances, well-being, and more
•Childcare support
•Air Conference for meeting the team, collaborating, and growing together
•Pension Fund
•Urban Sports Club membership
•Meals 100% free at the hub
•Applicants must submit their own work without any AI-generated assistance. Any use of AI in application materials, assessments, or interviews will result in disqualification.

Stop applying.
Get referred.

$10 in free credits

In just 60 seconds, fully on autopilot — Eraldt's AI agents read your CV, map the roles you fit, find live vacancies and the people who can refer you, write personal emails, and get you referred.

This isn't an application: your CV doesn't go to the company, and we don't promise a referral for this exact role.

Discover who else lands interviews on autopilot