ABOUT US

Noomeroo is an AI financial co-pilot for Spanish SMEs and the accountants who serve them. We're live and onboarding customers, with a lean, AI-augmented team that moves faster than companies several times our size.

We work differently from most companies our size. Our founders are technical and build alongside the engineering team with modern AI-assisted tooling. In this role you'll own the quality, security and reliability of what we ship, lead our compliance-critical integrations, and help set the engineering standard as we scale.

Security is a dedicated responsibility at Noomeroo from day one, because our clients trust us with their financial data. This role brings product engineering and security together: you'll build and review code, and you'll own how we protect client data.

We're looking for experienced engineers who treat AI as a serious tool, one that accelerates good work but still needs sharp human judgement to ship safely. If that's how you already work, you'll feel at home here.

THE STACK

React/TypeScript frontend, Postgres + serverless backend, deployed on a modern PaaS. If those words mean something specific to you, you'll know what we're using.

WHAT YOU'LL ACTUALLY DO

Engineering

- Lead code review and quality standards. Set the bar for what reaches production: correctness, edge cases and security. Mentor the rest of the team as we grow.
- Keep the platform fast and reliable. Monitor, diagnose and resolve issues quickly for the businesses that depend on us.
- Own our compliance integrations. E-invoicing, open banking and tax authority compliance are the highest-stakes parts of the stack. You own them end to end.
- Evolve our environments and release process. We run a structured staging-to-production promotion process. You'll develop it further as we scale.
- Build features. Using the same AI-assisted tooling we all use. No religion about who writes what.

Security

- Own security across the stack. Multi-tenant data isolation, access control, authentication,



secrets and key management.
- Harden what we depend on. Dependency management, vulnerability scanning and supply-chain security across everything we run.
- Own monitoring and incident response. Logging, alerting and a clear, practised response process, owned by you.
- Be our security voice. Answer security questionnaires from banking and compliance partners, work with external auditors when needed, and keep our data-protection controls in shape.

WHO YOU ARE

- 5-6+ years of professional software engineering experience, including at least 3 years building and running production apps with React, TypeScript and a Postgres-based (ideally serverless) stack.
- Security-minded by instinct. You know the OWASP Top 10 well, you've implemented or reviewed auth and access control in production, and you think about how things break before you think about how they work.
- Experience leading by example. You've set code review standards or mentored other engineers, and you're comfortable owning decisions end to end.
- Fluent with AI-assisted development. You have opinions about prompts, context files and when AI gets things wrong, and you bring engineering judgement to every line that ships.
- Sharp debugger. You can read an error, open the right file and find the cause in minutes.
- Low ego, high standards. You don't care who wrote the code. You care that it works, that it's secure, and that it ships.
- Energised by impact. You like a focused team where your work is visible and matters from week one.
- Based in Barcelona, or ready to relocate. This role is in-office.
- Bonus:



fintech or regulated-data experience, hands-on GDPR work, experience with e-invoicing, open banking or tax APIs, or a security certification (e.g. Security+, CISSP, OSCP).

YOU'LL PROBABLY LOVE THIS IF

- You've been quietly frustrated that the industry hasn't caught up with how you actually work.
- You want to ship things real people use, not maintain a legacy codebase.
- You want to join the core team early, with real ownership and equity upside.
- You want to deepen your security expertise with real responsibility, not a ticket queue.
- You like working in person, with fast whiteboard sessions and tight feedback loops.

YOU'LL PROBABLY HATE THIS IF

- You believe AI-assisted code is fundamentally unreliable.
- You need months of architecture work before shipping anything.
- You want heavyweight process and long sprint rituals.
- You prefer process over judgement, or need approvals to fix things.
- You're looking for full-remote.

WHAT WE OFFER

- €55-65K base + equity (adjust to your budget)
- Barcelona office, in person, with founders who ship daily and respect engineering work
- Real investment in your security growth: training, certifications, conference time
- A clear path to lead engineering as we grow

HOW TO APPLY

Send us

1. A short note (5-10 lines is fine): how you use AI in your day-to-day work, and one thing you've shipped recently that you're proud of.
2. Links to your work: GitHub, side projects, anything that shows how you build.
3. One paragraph on this: "Our team ships with AI-assisted tooling and every change is reviewed before production. How would you design that review process so it stays rigorous without slowing delivery?"
4. One sentence: in a multi-tenant Postgres app, how would you verify tenant isolation actually holds?

A CV is optional if your GitHub and work history make your experience clear. We care more about how you think than where you worked.

Apply here: [email protected]

📌 Product Engineer (Security) (Barcelona)
🏢 Noomeroo
📍 Barcelona