Security engineer

The Knot Worldwide Inc.; Barcelona; Hybrid; EUR 90,000 - 140,000; Full time

Job summary

The Knot Worldwide Inc. is seeking a Senior Security Engineer to lead strategic security initiatives across TKWW’s corporate and production environments.

You will mentor engineers, own security domains, and influence architectural decisions to set the long-term security vision. You will design secure containerized patterns in multi-cloud environments, drive threat detection and vulnerability management, and collaborate with product and platform teams to bake security into roadmaps from the

Qualifications

• Bachelor's Degree in Computer Science or related field (Master's preferred).
• 5+ years of progressive security engineering or security architecture experience in large-scale, production environments.
• 5+ years of hands-on experience securing cloud applications and infrastructure (AWS strongly preferred).
• Experience leading cross-functional projects to successful completion.
• Deep understanding of security vulnerabilities and automated remediation techniques.

Responsibilities

• Lead the strategy, design, and implementation of security controls across TKWW environments.
• Mentor junior security engineers and provide technical guidance.
• Architect and implement containerized security in multi-cloud setups (EKS/GKE).
• Collaborate with leads to define product/platform roadmaps with security baked in.
• Own threat detection, vulnerability management, and security postmortems.

Skills

Security leadership

Cloud security

Container security

Threat detection

Communication

Education

Bachelor's Degree in Computer Science

Master's degree preferred

Tools

AWS

Docker

Kubernetes

WAF/Bot security tools

Job description

Описание:

The TKWW InfoSec Team is seeking a Senior Security Engineer to lead strategic security initiatives, mentor team members, and address the most complex and ambiguous technical and programmatic security challenges. You will act as a subject-matter expert, taking ownership of critical security domains, influencing architectural decisions across engineering teams, and helping to set the long-term vision for security at TKWW.

Задачи:

• Lead and Drive the strategy, design, and implementation of security controls and secure patterns across all TKWW corporate and production environments.
• Mentor junior security engineers and provide technical guidance on complex security issues, fostering a culture of security within engineering.
• Architect and implement advanced, secure, and scalable containerized architectures in multi-cloud environments.
• Collaborate with engineering leads to define product and platform roadmaps, ensuring security requirements are integrated from the initial design phase.
• Own and continuously improve threat detection, application security, vulnerability management, and assessment procedures, acting as the final escalation point for complex remediation efforts.
• Act as a Subject Matter Expert (SME) for one or more critical security domains (e.g., Identity and Access Management, Data Protection, Cloud Network Security).
• Lead the response and post-mortem analysis for high-severity security incidents, driving long-term preventative measures.
• Identify and implement strategic opportunities to improve process maturity and automation, including developing sophisticated internal security tools and procedures.
• Provide continuous technical support and escalation management for security-related issues throughout TKWW.

Требования:

• Bachelor's Degree in Computer Science or a related field (Master's degree preferred).
• A minimum of 5+ years of progressive security engineering or security architecture experience is required, with a focus on large-scale, production environments.
• 5+ years of hands-on experience securing cloud applications and infrastructure (AWS strongly preferred, multi-cloud experience a plus).
• The candidate should have a proven track record of leading or mentoring major cross-functional projects to their successful completion.
• Deep and comprehensive understanding of security vulnerabilities, attacker exploit techniques, and methods for large-scale, automated remediation.
• Expert-level understanding/working knowledge of public cloud infrastructure and services in Akamai, AWS (IAM, VPC, KMS, CloudWatch, Systems Manager, S3, RDS, Route53, Lambda, AWS Config, etc.).
• Expert-level understanding of Docker and container orchestration with Kubernetes and hands-on experience securing production EKS/GKE clusters.
• Proven experience with advanced application security concepts, including designing and securing microservice and API-based architectures.
• Experience with security tooling, including WAF and Bot Management platforms.
• Excellent written and verbal communication skills, with the ability to articulate complex security risks and technical requirements to both non-technical executive stakeholders and highly technical engineering/DevOps teams.
• Proven ability to operate with a high degree of autonomy, acting as a self-starter who drives projects to successful completion with minimal oversight.
• Будет плюсом: Experience with scripting and automation (Python, Go, or other modern languages); Relevant industry certifications (e.g., CISSP, CISM, AWS/Azure Security, GSEC); Advanced experience in security engineering, DevOps, or IT operations roles, with expertise in CI/CD pipeline security; Experience in defining and enforcing security policies across a diverse, global organization

Условия:

We believe in a wide range of holistic offerings to support our employees so that they can live our values day in and day out. From mental wellbeing, physical health and financial planning, to engaging perks and discounts, we are in the business of celebrating and supporting the Moments that Matter, both in and out of the office. We offer flexible vacation, generous parental leave, and prioritize initiatives that support the growth, development, and happiness of our people. Together@TKWW is our approach to hybrid work. It’s designed to support how we work best: combining the flexibility we value with meaningful opportunities to connect in person. For Together@TKWW-eligible roles, this includes regular in-office time to foster collaboration and connection. For roles not eligible for in-office expectations, we support connection through virtual collaboration and intentional gatherings.