Overview

In this role, you strengthen Emburse’s security posture across an AI-powered spend platform. You will lead incident response, manage security tooling, and drive secure coding practices with engineering teams. You’ll embed shift-left security in the software lifecycle and mentor peers to raise security standards. The role offers impact at scale, collaborating cross-functionally to protect users and data. You’ll work in a fast-paced, solutions-driven environment that values innovation and resilience.

Responsabilidades

- Manage security tools and systems (SIEM, IDS/IPS, endpoint protection, vulnerability management)
- Monitor, analyze, and triage security events, alerts, and logs
- Perform incident response activities including containment, eradication, recovery, and documentation
- Investigate incidents, determine root cause, and recommend remediation
- Execute incident response playbooks and SOPs
- Triage and manage bug bounty submissions, code scanning results, and vulnerability findings
- Collaborate with engineering/product teams to embed shift-left security in SDLC
- Experience with DevSecOps, DevOps, CI/CD pipelines, and secure code development
- Assist with internal/external vulnerability scanning, segmentation testing, and penetration testing




- Create and maintain security metrics and leadership-facing dashboards
- Stay current with threats and best practices; propose security enhancements
- Administer IAM systems with least privilege and periodic access reviews
- Develop and maintain policies for privileged account management

Requisitos principales

- Senior security leadership experience
- Strong knowledge of security principles and technologies (network security, encryption, access control, vulnerability management)
- Extensive experience with SIEM, IDS, and vulnerability scanners
- Deep cloud security knowledge (AWS, Azure, GCP)
- Scripting/automation in Python, PowerShell, or Bash
- Incident response and forensics experience
- Knowledge of ISO 27001, NIST, PCI DSS
- Excellent analytical and problem-solving abilities
- Strong written and verbal communication to non-technical stakeholders

- Self-starter with minimal supervision
- Ability to work in large cross-functional teams
- Clear written communication for stakeholders
- SIEM, IDS/IPS, endpoint protection, vulnerability management
- Cloud security (AWS, Azure, GCP)
- Incident response and forensics

📌 Senior Security Engineer - Emburse (Barcelona)
🏢 Emburse
📍 Barcelona