A fitness and wellness management software company that we partner with at Joppy is looking to hire a Senior Security Engineer to lead the security transformation and build security foundations from scratch.
Protect the personal data of approximately 10 million users
Enable the sales team to effectively answer security questionnaires for enterprise clients
Work collaboratively within the SRE team, partnering with software engineering and other department leaders
Reduce business risk by proactively preventing and responding to security incidents in a fast-scaling environment
What you'll do
Security Engineering (60%) Harden AWS infrastructure, Kubernetes clusters, and application security
Implement automated scanning (SAST/DAST) and dependency checks
Strengthen authentication and identity management (SSO, MFA, Google Workspace)
Set up vulnerability management and alerting, integrated with engineering sprints
Respond to security incidents, create runbooks, and support customer security requests
Security Culture & Training (40%) Develop and deliver engaging, role‑specific training;
run phishing simulations
Define and enforce hardware and endpoint security standards
Build a network of security champions and create self‑service security guides
Create pragmatic policies and governance that balance security with business needs
AWS
Infrastructure as Code: Terraform, Helm
Monitoring: Grafana,



ELK stack
Frontend: React, TypeScript
5+ years of experience in security engineering, infrastructure security, or security software engineering
Hands‑on expertise with AWS or GCP security (IAM, security groups, WAF, etc.)
Deep understanding of application security (OWASP Top 10, secure coding, API security)
Experience building security programs from the ground up in high‑growth environments
Track record in incident response and handling data breach scenarios
Programming skills in at least one language: Python, TypeScript, or Golang
Experience training employees on security best practices
Nice to have
Experience with GDPR compliance and data protection regulations
Background in penetration testing or offensive security
Familiarity with Django, React, PostgreSQL, Terraform
Experience responding to security questionnaires for enterprise sales
Knowledge of SOC2 or ISO27001 implementation
Vibrant office environment with complimentary drinks and snacks
Adaptable hybrid working model with two remote days per week, plus 15 additional remote days per year
Health insurance fully covered
Discounted gym membership via Wellhub, with access to various gyms and wellbeing apps
Collaborative, international team
Paid sick leave to support your health
About Joppy
#J-18808-Ljbffr

📌 Senior Security Engineer (Barcelona)
🏢 Joppy
📍 Barcelona