OverviewIn this role you will own the security of Lingokids apps and the systems behind them.
You will integrate security into engineering work across frontend, backend, and cloud, making the secure path the default.
You'll lead threat modeling, tooling for CI/CD, and software supply chain integrity to protect millions of young users.
The position combines hands-on security work with cross-functional collaboration to uphold COPPA/GDPR privacy commitments.
This is a chance to shape a security-first culture at a fast-growing, fully remote kids' entertainment company.
Compensaciones / BeneficiosRemote in Spain
Stock options
Home office setup allowance
Meal allowances
Health insurance
Language lessons
ResponsabilidadesOwn security across React Native app, Ruby backend, APIs, and AWS infrastructure
Conduct threat modeling and design reviews for new features and architecture changes
Develop and maintain security tooling in CI/CD (SAST, dependency scanning, secrets detection, mobile analysis)
Strengthen software supply chain (third-party SDKs, open-source dependencies, build integrity)
Identify, triage,



and fix vulnerabilities; contribute hands-on in code when needed
Coordinate or conduct penetration testing and translate findings into fixes
Collaborate with Legal and Privacy to ensure kids privacy compliance in practice
Elevate engineering security standards through guidelines, reviews, and training
Participate in security incident response
Requisitos principales5+ years in security engineering with product-focused security
Hands-on mobile app security experience, ideally React Native; familiarity with OWASP MASVS/ASVS
Ability to read, review, and write code; Ruby and/or JavaScript/TypeScript preferred
Experience integrating security tooling into CI/CD pipelines
Strong knowledge of web/API security, authentication, and authorization
Judgment to prioritize real risk and effective communication with engineers
clear written and spoken communication
cross-functional collaboration
prioritization based on risk
React Native
Ruby
JavaScript/TypeScript

📌 Sr. Application Security Engineer (Madrid)
🏢 Lingokids
📍 Madrid