Security Engineer, Workato

• If you're passionate about shifting security left, enabling engineering teams, and influencing product design, this is the role for you
• Bachelor's degree in Computer Science, Cybersecurity, or related technical field
• 4+ years in cybersecurity or software engineering, with at least 2 years focused on application or product security
• Strong understanding of software development processes and ability to speak the language of engineers
• Proficiency in one or more programming AND scripting languages (e.g., Ruby, Java, Python, JavaScript, Bash)
• Hands-on experience with vulnerability scanners and security testing tools
• Strong knowledge of threat modeling and security architecture reviews
• AI/ML security experience including risk assessment and prevention guidelines

Desirable

• Join our Product Security team in Barcelona as a Security Engineer - Embedded AppSec and help secure the future of AI automation
• In this role, you will be deeply integrated with our development teams, embedding security throughout the software development lifecycle (SDLC), and ensuring security is built-in while playing a key role in our Agentic AI Transformation
• You will work closely with developers, architects, and product managers to perform early threat modeling, offer actionable security guidance, and reduce risk before it ships
• You will play a pivotal role in safeguarding our systems, ensuring compliance, and advancing our security posture
• Secure SDLC Integration: Embed with engineering teams to ensure security is part of every phase of the development lifecycle, from design to deployment
• Threat Modeling & Design Reviews: Conduct early-stage threat modeling and participate in architectural and design reviews to identify and mitigate risks proactively
• Security Enablement: Act as a security champion within product teams by providing training, building security knowledge, and driving adoption of secure coding practices
• Code & Pipeline Reviews: Perform code reviews with a security lens and provide guidance on CI/CD pipeline security
• Vulnerability Discovery & Triage: Identify and prioritize vulnerabilities using static/dynamic analysis and manual review, and work with developers on remediation strategies
• Security Tooling & Automation: Collaborate with the broader ProdSec and DevOps teams to improve tooling and automate security feedback loops
• Cross-Functional Collaboration: Partner with Product, SecOps, and Platform teams to align security with product goals and agile workflows
• Security Advocacy: Help scale security awareness through documentation, workshops, and informal coaching embedded in daily engineering practice
• Security Automation: Design and implement automated security tools and processes to improve detection, response, and compliance efficiency
• This role offers the opportunity to secure mission-critical systems deployed globally while working with cutting-edge AI and cloud technologies. If you're looking to make a significant impact on enterprise security, this could be perfect for you