Experteer Overview

Envíe su CV y cualquier información adicional requerida después de haber leído esta descripción, haciendo clic en el botón de solicitud.
In this role you lead a general security engineering team focused on building security into the release lifecycle within a high-scale, regulated fintech environment. You will partner with software and platform leaders to embed security into roadmaps and sprints while maintaining hands-on architectural influence. The role emphasizes SSDLC, AI-driven workflows, vulnerability management, and cloud security across AWS and GCP. You help safeguard services and drive measurable security improvements that enable global growth.

Compensaciones / Beneficios
• Lead a global team of security engineers, mentoring and shaping career progression
• Define and implement high-level security architecture for existing systems and greenfield projects
• Align security with software and platform roadmaps and sprint cycles
• Conduct architecture reviews and critical code reviews; make final security trade-off decisions
• Deliver metrics and reporting on security posture to executives
• Define and scale SSDLC strategy with automated security testing (SAST/DAST/SCA) in CI/CD
• Institutionalise continuous threat modelling across product teams
• Design guardrails for agentic software development and AI-assisted workflows




• Oversee vulnerability management program, including triage, remediation SLAs, and risk reporting
• Direct AI-assisted tooling strategies and internal red-teaming platforms
• Direct IAM architecture across multi-cloud and microservices; enforce PAM and least privilege
• Collaborate with Platform Engineering to define security guardrails on AWS/GCP; review high-risk changes
• Support audits and close compliance gaps (ISO 27001, SOC 2, DORA) through engineering implementations

Responsabilidades
• 8+ years in software, platform, or security engineering
• 3+ years in engineering management
• Proven track record building security controls at scale xghoner in AWS and/or GCP and Kubernetes
• Hands-on secure coding, DevSecOps, threat modelling, and federated identity protocols (OAuth2, OIDC, SAML)
• Experience translating business risk into prioritized engineering work
• Delivery of multi-quarter security initiatives with measurable outcomes
• Data-driven, capable of defending technical positions to executives and engineers
• Experience in regulated financial services or fintech environments
• Familiarity with security frameworks (NIST CSF, ISO 27001, CIS)
• Excellent written and verbal English communications; successful remote leadership

Requisitos principales
•

📌 Senior Security Engineering Manager (Madrid)
🏢 Ebury
📍 Madrid