Associate Security Engineer: Hands-On FinTech Security

Spendesk; Barcelona; Híbrido; EUR 70.000 - 90.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Flexible on-site and remote policy

Latest Apple equipment

Wellbeing support

Descripción de la vacante

Spendesk is building a dedicated Security Engineering function. You’ll join a Senior Security Engineer to form the backbone of the engineering organisation's security.

The role is hands-on, focusing on vulnerability management, access controls, monitoring, and secure development support. You’ll work with Infrastructure and product engineering teams, translate compliance guidance into practice, and ship real security improvements from week one.

Formación

• Foundational experience in security engineering, SOC, or a DevOps/SRE role with a strong security focus.
• Solid understanding of web application security (OWASP Top 10, common attack vectors).
• Hands-on experience with two of: vulnerability scanning tools, SIEM/log analysis, IAM systems, or CI/CD security tooling.
• Comfortable scripting (Python, Bash) to automate security tasks.
• Collaborative mindset across teams to communicate security issues clearly and constructively.

Responsabilidades

• Triage vulnerabilities from bug bounty programs, scanners, and dependency checks.
• Support incident response: develop fixes, track resolution, and contribute to post-mortems.
• Implement and maintain SSO/MFA configurations and manage access rights.
• Run pre-deployment security checks: static analysis, dependency scanning, container image scans.
• Monitor SIEM alerts and maintain detection rules under guidance.

Conocimientos

Security engineering

SOC experience

DevOps / SRE security

Scripting (Python/Bash)

Cross-team collaboration

Herramientas

SIEM

CI/CD security tooling

IAM systems (Okta, Google Workspace)

Vulnerability scanners

Container security

Descripción del empleo

Spendesk is building a dedicated Security Engineering function. You’ll join a Senior Security Engineer to form the backbone of the engineering organisation's security.

The role is hands-on, focusing on vulnerability management, access controls, monitoring, and secure development support. You’ll work with Infrastructure and product engineering teams, translate compliance guidance into practice, and ship real security improvements from week one.