Security Engineer

Socium - Teams Done Differently; Madrid; Hybrid; EUR 60,000 - 90,000; Full time

Benefits offered by this job

Competitive salary

Hybrid work: 3 days in Madrid

Training & certification support

International team

Career progression

Job summary

Socium - Teams Done Differently is hiring a Security Engineer in Madrid. The role blends hands-on security work with collaboration across engineering, infra and compliance to protect platforms, cloud environments and data.

You’ll embed security into the SDLC, implement controls, and respond to incidents while supporting audits and regulatory requirements in the financial services sector.

Qualifications

• Experience in a Security Engineering or similar role.
• Experience with at least one major cloud platform (AWS, Azure or GCP).
• Hands-on with security tooling (SIEM/EDR/vulnerability scanners/WAFs).
• Solid understanding of networking, Linux/Windows hardening, IAM and encryption.

Responsibilities

• Designing, implementing and maintaining security controls across cloud and on-premise infrastructure.
• Embedding security into the SDLC: threat modelling, secure code reviews and security tooling in CI/CD pipelines (SAST, DAST, dependency and container scanning).
• Monitoring, investigating and responding to security events and incidents.
• Managing vulnerabilities, from identification and prioritisation through to remediation with engineering teams.
• Strengthening identity and access management, network security and secrets management.
• Supporting audits and regulatory requirements relevant to financial services (e.g. DORA, ISO 27001, GDPR).
• Producing clear documentation, runbooks and guidance, and helping lift security awareness across the business.

Skills

Security Engineering

Cloud Security

DevSecOps

Security tooling

Networking

Scripting

Containers

Communication

English fluency

Tools

SIEM

EDR

Vulnerability scanners

WAFs

Job description

Security Engineer

Madrid (Hybrid -- 3 days in the office) | Permanent

About the company

Our client is an established European financial technology group whose platforms help banks and private banks run their investment businesses. They work with a large base of financial institutions across Europe, and their products handle sensitive client and financial data every day. That means security sits at the core of what they deliver. They're growing their Madrid team and want a Security Engineer to help strengthen and scale their security function.

The role

You’ll be a hands-on member of the security team, working closely with engineering, infrastructure and compliance colleagues to protect the company’s platforms, cloud environments and data. You’ll find and fix risks, and you’ll also help build security into how software is designed, built and run.

What you’ll be doing

• Designing, implementing and maintaining security controls across cloud and on-premise infrastructure
• Embedding security into the SDLC: threat modelling, secure code reviews and security tooling in CI/CD pipelines (SAST, DAST, dependency and container scanning)
• Monitoring, investigating and responding to security events and incidents
• Managing vulnerabilities, from identification and prioritisation through to remediation with engineering teams
• Strengthening identity and access management, network security and secrets management
• Supporting audits and regulatory requirements relevant to financial services (e.g. DORA, ISO 27001, GDPR)
• Producing clear documentation, runbooks and guidance, and helping lift security awareness across the business

What we’re looking for

• Proven experience in a Security Engineering, Cloud Security, DevSecOps or similar role
• Strong knowledge of at least one major cloud platform (AWS, Azure or GCP) and its security services
• Hands-on experience with security tooling such as SIEM, EDR, vulnerability scanners and WAFs
• Solid understanding of networking, Linux/Windows hardening, IAM and encryption
• Scripting or automation skills (e.g. Python, Bash, PowerShell, Terraform)
• Familiarity with containers and orchestration (Docker, Kubernetes)
• Good communication skills and the ability to influence technical and non-technical colleagues
• Fluent English; Spanish is a plus

Nice to have

• Experience in financial services or another regulated industry
• Certifications such as CISSP, OSCP, CCSP, CEH or cloud security certifications
• Exposure to ISO 27001, SOC 2 or DORA compliance work

What’s on offer

• Competitive salary and benefits package
• Hybrid working: 3 days a week in the Madrid office
• The chance to shape security at an established, growing fintech
• Training, certification support and clear career progression
• An international, collaborative team