Product Engineer (Security)
THE STACK
React/TypeScript frontend, Postgres + serverless backend, deployed on a modern PaaS. If those words mean something specific to you, youll know what were using.

WHAT YOULL ACTUALLY DO
Engineering
Lead code review and quality standards. Set the bar for what reaches production: correctness, edge cases and security.
Keep the platform fast and reliable. Monitor, diagnose and resolve issues quickly for the businesses that depend on us.
Own our compliance integrations. E-invoicing, open banking and tax authority compliance are the highest-stakes parts of the stack. You own them end to end.
Evolve our environments and release process. We run a structured staging-to-production promotion process. Youll develop it further as we scale.
Build features. Using the same AI-assisted tooling we all use. No religion about who writes what.
Security
Own security across the stack. Multi-tenant data isolation, access control, authentication, secrets and key management.
Harden what we depend on. Dependency management, vulnerability scanning and supply-chain security across everything we run.
Own monitoring and incident response. Logging, alerting and a clear, practised response process, owned by you.
Be our security voice. Answer security questionnaires from banking and compliance partners, work with external auditors when needed, and keep our data-protection controls in shape.

WHO YOU ARE
Proven shipping experience. Youve built and run production apps with React, TypeScript and a serverless Postgres stack
Security-minded by instinct. You know the OWASP Top 10 well, youve implemented or reviewed auth and access control, and you think about how things break before you think about how they work
Fluent with AI-assisted development. You have opinions about prompts, context files and when AI gets things wrong, and you bring engineering judgement to every line that ships
Sharp debugger. You can read an error, open the right file and find the cause in minutes
Low ego, high standards.



You dont care who wrote the code. You care that it works, that its secure, and that it ships
Energised by impact. You like a focused team where your work is visible and matters from week one
Based in Barcelona, or ready to relocate. This role is in-office
Bonus: fintech or regulated-data experience, GDPR in practice, or a security certification. If the instinct is there, well back you to grow the rest

YOULL PROBABLY LOVE THIS IF
Youve been quietly frustrated that the industry hasnt caught up with how you actually work
You want to ship things real people use, not maintain a legacy codebase
You want to join the core team early, with real ownership and equity upside
You want to grow into security with real responsibility, not a ticket queue
You like working in person, with fast whiteboard sessions and tight feedback loops

YOULL PROBABLY HATE THIS IF
You believe AI-assisted code is fundamentally unreliable
You need months of architecture work before shipping anything
You want heavyweight process and long sprint rituals
You prefer process over judgement, or need approvals to fix things
Youre looking for full-remote

WHAT WE OFFER
45-50K base + equity
Barcelona office, in person, with founders who ship daily and respect engineering work
Real investment in your security growth: training, certifications, conference time
A clear path to lead engineering as we grow

HOW TO APPLY

Send us:
1. A short note (5-10 lines is fine): how you use AI in your day-to-day work, and one thing youve shipped recently youre proud of
2. Links to your work: GitHub, side projects, anything that shows how you build
3. One paragraph on this: Our team ships with AI-assisted tooling and every change is reviewed before production. How would you design that review process so it stays rigorous without slowing delivery?
4. One sentence: in a multi-tenant Postgres app, how would you verify tenant isolation actually holds?

React, TypeScript, PostgreSQL, JavaScript, SQL, Serverless, REST APIs, Git, CI/CD, OWASP, GDPR, Open Banking, E Invoicing

📌 Product Engineer (Security), presencial (Barcelona)
🏢 Noomeroo
📍 Barcelona