ppA fitness and wellness management software company that we partner with at Joppy is looking to hire a bSenior Security Engineer /bto lead the security transformation and build security foundations from scratch. /p ul liProtect the personal data of approximately 10 million users /li liEnable the sales team to effectively answer security questionnaires for enterprise clients /li liWork collaboratively within the SRE team, partnering with software engineering and other department leaders /li liReduce business risk by proactively preventing and responding to security incidents in a fast-scaling environment /li /ul h3What you'll do /h3 ul libSecurity Engineering (60%) /bHarden AWS infrastructure, Kubernetes clusters, and application security /li liImplement automated scanning (SAST/DAST) and dependency checks /li liStrengthen authentication and identity management (SSO, MFA, Google Workspace) /li liSet up vulnerability management and alerting, integrated with engineering sprints /li liRespond to security incidents, create runbooks, and support customer security requests /li libSecurity Culture Training (40%) /bDevelop and deliver engaging, role‑specific training; run phishing simulations /li liDefine and enforce hardware and endpoint security standards /li liBuild a network of security champions and create self‑service security guides /li liCreate pragmatic policies and governance that balance security with business needs /li liAWS /li liInfrastructure as Code: Terraform, Helm /li liMonitoring: Grafana,



ELK stack /li liFrontend: React, TypeScript /li li5+ years of experience in security engineering, infrastructure security, or security software engineering /li liHands‑on expertise with AWS or GCP security (IAM, security groups, WAF, etc.) /li liDeep understanding of application security (OWASP Top 10, secure coding, API security) /li liExperience building security programs from the ground up in high‑growth environments /li liTrack record in incident response and handling data breach scenarios /li liProgramming skills in at least one language: Python, TypeScript, or Golang /li liExperience training employees on security best practices /li /ul h3Nice to have /h3 ul liExperience with GDPR compliance and data protection regulations /li liBackground in penetration testing or offensive security /li liFamiliarity with Django, React, PostgreSQL, Terraform /li liExperience responding to security questionnaires for enterprise sales /li liKnowledge of SOC2 or ISO27001 implementation /li liVibrant office environment with complimentary drinks and snacks /li liFlexible hybrid working model with two remote days per week, plus 15 additional remote days per year /li liHealth insurance fully covered /li liDiscounted gym membership via Wellhub, with access to various gyms and wellbeing apps /li liCollaborative, international team /li liPaid sick leave to support your health /li /ul h3About Joppy /h3 /p #J-18808-Ljbffr

📌 Senior Security Engineer (Barcelona)
🏢 Joppy
📍 Barcelona