Everything happens somewhere — which is why spatial analytics is fundamental to companies trying to understand the “where” and the “why” of their business. CARTO is the world’s leading cloud-native spatial analytics platform, built to break down the silos of traditional GIS.

Trusted by data scientists, analysts, and developers from global brands such as IKEA, Coca-Cola, T-Mobile, Swiss Re, and AXA, CARTO enables organizations to run scalable spatial analysis directly on their cloud data warehouse. Our platform powers critical use cases such as site selection, catastrophe modeling, network planning, geomarketing, supply chain optimization, and AI-driven spatial analysis.

Built by a diverse team of over 150 people across the US, APAC, and Europe, CARTO’s cloud-native Agentic GIS platform provides a modern, future-proof alternative to legacy GIS. Backed by Insight Partners, Accel, Salesforce Ventures, Earlybird, and others, CARTO is fundamentally changing the way location data is analyzed, making it an integrated and accessible part of modern data and AI workflows.

Over the years, CARTO has built a powerful and sophisticated platform. Like any mature software company, that also means we have accumulated complexity, legacy decisions, and areas of technical and security debt that need to be revisited with fresh eyes.

At the same time, AI is changing the security landscape. Defending a modern software platform can no longer be limited to audits, checklists, or isolated security reviews. It needs to be embedded in the way the platform is designed, built, refactored, and operated.

We are looking for a Senior Software Engineer focused on Security & Platform Hardening to join our Core Team. This is a role for someone who is comfortable jumping between layers and domains, has a bias for automation, and gets genuine satisfaction from making the whole organization more secure and more productive at the same time. You'll touch many different technologies and codebases, and your impact will be felt across the whole company.

This is a remote-first role, open to candidates based anywhere in Europe. We have offices in Madrid and Seville if you prefer to work in person or want a place to collaborate occasionally, but there is no expectation to use them.