Overview

In this role you will own the security of Lingokids apps and the systems behind them. You will integrate security into engineering work across frontend, backend, and cloud, making the secure path the default. You’ll lead threat modeling, tooling for CI/CD, and software supply chain integrity to protect millions of young users. The position combines hands-on security work with cross-functional collaboration to uphold COPPA/GDPR privacy commitments. This is a chance to shape a security-first culture at a fast-growing, fully remote kids’ entertainment company.

Compensaciones / Incentivos

- Remote in Spain
- Stock options
- Home office setup allowance
- Meal allowances
- Health insurance
- Language lessons

Responsabilidades

- Own security across React Native app, Ruby backend, APIs, and AWS infrastructure
- Conduct threat modeling and design reviews for new features and architecture changes
- Develop and maintain security tooling in CI/CD (SAST, dependency scanning, secrets detection, mobile analysis)
- Strengthen software supply chain (third-party SDKs, open-source dependencies, build integrity)
- Identify, triage,



and fix vulnerabilities; contribute hands-on in code when needed
- Coordinate or conduct penetration testing and translate findings into fixes
- Collaborate with Legal and Privacy to ensure kids privacy compliance in practice
- Elevate engineering security standards through guidelines, reviews, and training
- Participate in security incident response

Requisitos principales

- 5+ years in security engineering with product-focused security
- Hands-on mobile app security experience, ideally React Native; familiarity with OWASP MASVS/ASVS
- Ability to read, review, and write code; Ruby and/or Java Script/Type Script preferred
- Experience integrating security tooling into CI/CD pipelines
- Strong knowledge of web/API security, authentication, and authorization
- Judgment to prioritize real risk and effective communication with engineers

- clear written and spoken communication
- cross-functional collaboration
- prioritization based on risk
- React Native
- Ruby
- Java Script/Type Script

📌 Sr. Application Security Engineer (Madrid)
🏢 Lingokids
📍 Madrid