Experteer Overview
Por favor, lea detenidamente la siguiente descripción del puesto para asegurarse de que encaja con el perfil antes de enviar su solicitud.
As an early senior member of Spendesk's dedicated Security Engineering function, you will shape how we protect our platform and respond to threats. You will build tooling, train developers, and partner with Infrastructure to implement secure-by-default solutions. You own the technical security roadmap, translating risk findings into engineering-native tools and processes while guiding remediation. This is an IC role with high influence, focused on depth over management, and you will mentor an Associate Security Engineer. You’ll operate hands-on from day one and evolve toward architecture, strategy, and coaching as the team grows.
Compensaciones / Beneficios
• Own and operate the bug bounty program, including platform management and escalation planning
• Lead vulnerability triage and act as escalation point for high-severity findings
• Drive security incident response, forensics, remediation coordination, post-mortems, and tracking
• Own the SIEM platform architecture, detection rules, and IOC development
• Enhance detection coverage and maintain security runbooks and docs
• Own IAM implementation and operations for product and infrastructure systems, including SSO/MFA and access reviews
• Embed security into the development lifecycle with threat modelling, secure code patterns, and CI/CD hardening




• Perform technical security reviews of code (TypeScript, Node. xghoner js, Python), IaC (Terraform), and multi-tenant AWS environments
• Drive security tooling in CI/CD, build automated gate suite (SAST, SCA, container scanning, AI risk detection)
• Governing AI tooling adoption, threat modelling for AI workflows, and standard-setting for code assistants
• Coordinate and execute penetration tests and security audits, manage auditor relationships, and drive post-audit actions
• Past remediation activities within governance timelines and backlog management
• Coach engineers through workshops, secure-code guidance, and design reviews
• Surface security risks to engineering leadership and contribute to the security backlog and roadmap
• Partner with Infrastructure on secure-by-default solutions
Responsabilidades
• Track record of owning security outcomes end-to-end with hands-on experience in at least three areas
• Ability to own and communicate a roadmap autonomously
• Deep understanding of modern web architectures and where they break
• Strong scripting/automation ability (Python, Bash, or similar)
• Experience mentoring engineers or security practitioners
• Excellent communication to explain risks to non-specialists
Requisitos principales
• versátil on-site and remote policy
• latest Apple equipment
• Moka.care for wellbeing
• office snacks
• health insurance
• gym memberships

📌 Senior Security Engineer (Barcelona)
🏢 Spendesk
📍 Barcelona