Everything happens somewhere — which is why spatial analytics is fundamental to companies trying to understand the “where” and the “why” of their business. CARTO is the world’s leading cloud-native spatial analytics platform, built to break down the silos of traditional GIS.
Trusted by data scientists, analysts, and developers from global brands such as IKEA, Coca-Cola, T-Mobile, Swiss Re, and AXA, CARTO enables organizations to run scalable spatial analysis directly on their cloud data warehouse. Our platform powers critical use cases such as site selection, catastrophe modeling, network planning, geomarketing, supply chain optimization, and AI-driven spatial analysis.
Built by a diverse team of over 150 people across the US, APAC, and Europe, CARTO’s cloud-native Agentic GIS platform provides a modern, future-proof alternative to legacy GIS. Backed by Insight Partners, Accel, Salesforce Ventures, Earlybird, and others, CARTO is fundamentally changing the way location data is analyzed, making it an integrated and accessible part of modern data and AI workflows.
Over the years, CARTO has built a powerful and sophisticated platform. Like any mature software company, that also means we have accumulated complexity, legacy decisions, and areas of technical and security debt that need to be revisited with fresh eyes.
At the same time, AI is changing the security landscape. Defending a modern software platform can no longer be limited to audits, checklists, or isolated security reviews. It needs to be embedded in the way the platform is designed, built, refactored, and operated.
We are looking for a Senior Software Engineer focused on Security & Platform Hardening to join our Core Team. This is a role for someone who is comfortable jumping between layers and domains, has a bias for automation, and gets genuine satisfaction from making the whole organization more secure and more productive at the same time. You'll touch many different technologies and codebases, and your impact will be felt across the whole company.
This is a remote-first role, open to candidates based anywhere in Europe. We have offices in Madrid and Seville if you prefer to work in person or want a place to collaborate occasionally, but there is no expectation to use them.
-
Improve the security of the platform through code. Work directly in the CARTO codebase to identify, prioritize, and fix security weaknesses. This may involve refactoring existing components, redesigning risky flows, improving authorization boundaries, strengthening input validation, removing unsafe patterns, or building new platform capabilities that make secure development easier for everyone.
- Strengthen our cloud and infrastructure foundations. Work with our infrastructure and platform teams to harden CARTO’s cloud-native environments across GCP and AWS. You will contribute to areas such as IAM, Kubernetes, containerized workloads, networking, workload isolation, Infrastructure as Code, and secure-by-default deployment patterns.
- Make security part of the development workflow. Build and improve tools, checks, libraries, CI/CD integrations, and engineering practices that help developers catch security issues early. The goal is not to create gates that slow teams down, but to make the secure path the easiest path.
- Improve supply-chain security. Help protect CARTO from modern supply-chain attacks by improving dependency management, build integrity, container security, artifact provenance, CI/CD security, and automated scanning. Stay up to date with emerging attack techniques and translate that knowledge into practical protections.
- Use AI to improve security. Experiment with the latest AI models and tools to assess and improve CARTO’s security posture. This could include AI-assisted code review, automated vulnerability discovery, codebase analysis, threat modeling, dependency analysis, or internal agents that continuously look for risky patterns and misconfigurations.
- Secure AI and agentic systems. CARTO is building an Agentic GIS platform, which creates new security challenges. You will help us reason about and defend against risks such as prompt injection, tool misuse, data leakage, privilege escalation through agents, untrusted content flowing into automated workflows, and unsafe model/tool interactions.
- Raise the security bar across engineering. Partner with engineering teams to review designs, identify risks, and implement improvements. Help make every team more security-aware while remaining pragmatic, collaborative, and focused on enabling product velocity.
-
5+ years of experience as a software engineer, platform engineer, infrastructure engineer, or security-focused engineer.
- Strong hands-on programming skills in at least one of TypeScript, Python, or Go, and the ability to work across a large production codebase.
- Experience designing, refactoring, and operating complex cloud-native software systems.
- Strong understanding of application security, including authentication, authorization, input validation, secure API design, multi-tenant systems, and secure SDLC practices.
- Practical experience with cloud infrastructure on GCP or AWS, including IAM, secrets management, networking, containers, and Kubernetes.
- Experience with Infrastructure as Code, preferably Terraform or similar tools.
- Familiarity with software supply-chain security: dependency risks, CI/CD hardening, container scanning, build integrity, artifact provenance, and secure release processes
- Previous experience in using AI tools to analyze code, detect vulnerabilities, automate reviews, or improve engineering workflows.
- A collaborative, low-ego approach. You make security something engineers want to adopt, not something they try to work around.
- Experience in application security, product security, penetration testing, or red-team exercises.
- Experience securing AI or agentic systems, including prompt-injection defense, tool sandboxing, model access controls, or AI data-exfiltration risks.
- Experience building internal developer platforms, secure libraries, CI/CD tooling, or engineering automation.
- Experience with SOC 2, ISO 27001, or similar compliance frameworks, especially if you have helped translate compliance needs into automated engineering controls.
- Contributions to open-source security tooling, security research, responsible disclosure, or technical writing on security topics.
- Experience with geospatial, data platforms, cloud data warehouses, or enterprise SaaS platforms.
-
Compensation based on experience, discussed transparently during the process, plus an annual bonus of up to 10% based on company objectives.
- The opportunity to contribute to a platform used by top companies around the world.
- A direct impact on the security, reliability, and future architecture of CARTO.
- Access to our Employee Stock Options Plan.
- Private medical insurance.
- Flexible compensation.
- Education stipend.
- Remote work stipend.
- English classes.
We specialize in delivering innovative solutions and exceptional services to meet the diverse needs of our clients. With a strong commitment to quality and customer satisfaction, we strive to exceed expectations and drive success in every project we undertake.
