At Spendesk, we're building the leading spend management platform for modern businesses, processing billions of euros across Europe and beyond.
Security is at the heart of what we do: our customers trust us to safeguard their financial data, and we're committed to raising the bar for security in fintech.
We're creating a dedicated Security Engineering function.
You'll be the first senior hire in this space, shaping how we protect our platform, how we respond to threats, and how we build a security-aware engineering culture from the inside.
Your Mission You'll be the security conscience for engineering: building tooling, training developers, and partnering with Infrastructure on secure-by-default solutions.
You own the technical security roadmap: partnering with the compliance team to identify risks, translating findings into actionable engineering-native tools and processes, driving remediation, and raising the bar across the organisation.
It's an individual contributor track with high influence, focused on technical depth, not people management.
You'll mentor an Associate Security Engineer, shape practices across squads, and be the go-to person when engineering teams need security guidance.
You'll be hands-on across the full security surface from day one.
As the team grows, you'll move from day-to-day operations toward architecture, strategy, and mentoring, acting as the escalation point for the Associate Security Engineer.
Key Responsibilities Vulnerability own the security backlog and roadmap.
A track record of owning security outcomes end to end,



with hands-on experience across at least three of: code auditing, infrastructure security (AWS/Linux), penetration testing, SIEM operations, incident response.
Deep understanding of modern web architectures (microservices, cloud-native, PaaS/SaaS) and where they break.
Strong scripting and automation ability (Python, Bash, or similar).
Experience mentoring other engineers or security practitioners.
Excellent communication: you can explain a CVSS 9.8 to a PM and get them to prioritise it.
Experience with ElasticSearch / ELK stack in production.
Familiarity with AWS, GCP, Snowflake, Datadog, Okta.
Knowledge of security standards and frameworks (ISO *****, OWASP, SOC 2, PCI-DSS).
Reverse engineering and analysis of minified/obfuscated code.
As we are an international team, please submit your application and CV in English.
About Spendesk Spendesk is the AI-powered spend management and procurement platform that transforms company spending.
By simplifying procurement, payment cards, expense management, invoice processing, and accounting automation, Spendesk sets the new standard for spending at work.
Its single, intelligent solution makes efficient spending easy for employees and gives finance leaders the full visibility and control they need across all company spend, even in multi-entity structures.
Trusted by thousands of companies, Spendesk supports over 200,000 users across brands such as Payfit, Accor, Welcome to the Jungle, Swile, Big Mamma, Malt and Yousign.

📌 Senior AWS Security Engineer (Barcelona)
🏢 Spendesk
📍 Barcelona