Overview In this role, you strengthen Emburse's security posture across an AI-powered spend platform. You will lead incident response, manage security tooling, and drive secure coding practices with engineering teams. You'll embed shift-left security in the software lifecycle and mentor peers to raise security standards.

The role offers impact at scale, collaborating cross-functionally to protect users and data. You'll work in a fast-paced, solutions-driven environment that values innovation and resilience.

Responsabilidades

Manage security tools and systems (SIEM, IDS/IPS, endpoint protection, vulnerability management)

Monitor, analyze, and triage security events, alerts, and logs

Perform incident response activities including containment, eradication, recovery, and documentation

Investigate incidents, determine root cause, and recommend remediation

Execute incident response playbooks and SOPs

Triage and manage bug bounty submissions, code scanning results, and vulnerability findings

Collaborate with engineering/product teams to embed shift-left security in SDLC

Experience with DevSecOps, DevOps, CI/CD pipelines, and secure code development

Assist with internal/external vulnerability scanning, segmentation testing, and penetration testing





Create and maintain security metrics and leadership-facing dashboards

Stay current with threats and best practices; propose security enhancements

Administer IAM systems with least privilege and periodic access reviews

Develop and maintain policies for privileged account management

Requisitos principales Senior security leadership experience

Strong knowledge of security principles and technologies (network security, encryption, access control, vulnerability management)

Extensive experience with SIEM, IDS, and vulnerability scanners

Deep cloud security knowledge (AWS, Azure, GCP)

Scripting/automation in Python, PowerShell, or Bash

Incident response and forensics experience

Knowledge of ISO 27001, NIST, PCI DSS

Excellent analytical and problem-solving abilities

Strong written and verbal communication to non-technical stakeholders

Self-starter with minimal supervision

Ability to work in large cross-functional teams

Clear written communication for stakeholders

SIEM, IDS/IPS, endpoint protection, vulnerability management

Cloud security (AWS, Azure, GCP)

Incident response and forensics

📌 Senior Security Engineer (Barcelona)
🏢 Emburse
📍 Barcelona