Senior App Security Engineer — Remote

Lingokids; Madrid; Remote; EUR 70,000 - 90,000; Full time

Benefits offered by this job

Health insurance

Remote in Spain

Relocation support

Stock options

Home office allowance

Meal allowances

Language classes

Visa sponsorship

Team offsites

Job summary

Lingokids in Spain is hiring a Senior Application Security Engineer to own the security of our React Native app, Ruby backend services and AWS infrastructure. You will design threat models, review architecture, and implement secure tooling in CI/CD.

You’ll strengthen supply chain security, triage vulnerabilities and coordinate penetration tests, working with Legal to meet COPPA and GDPR requirements. Fluency in English is essential in our fully remote, multinational team.

Qualifications

• 5+ years in security engineering in a product company.
• Hands-on mobile app security experience, ideally React Native.
• Ability to read, review and write code (Ruby and/or JavaScript/TypeScript).

Responsibilities

• Own application security across React Native app, Ruby backend and AWS infrastructure.
• Run threat modeling and design reviews for features and architecture changes.
• Build and maintain security tooling in CI/CD: SAST, dependency scanning, secrets detection, mobile app analysis.
• Strengthen software supply chain: SDKs, open-source deps, build integrity.
• Find, triage and fix vulnerabilities; hands-on in code when needed.
• Run or coordinate pentests and translate findings into fixes.
• Work with Legal/Privacy to meet COPPA and GDPR in practice.
• Raise security baseline via guidelines and training.
• Participate in security incident response.

Skills

Security engineering

Mobile security

React Native

MASVS/ASVS

JavaScript/TypeScript

CI/CD tooling

Web/API security

Communication skills

Tools

AWS

SAST tooling

Job description

Lingokids in Spain is hiring a Senior Application Security Engineer to own the security of our React Native app, Ruby backend services and AWS infrastructure. You will design threat models, review architecture, and implement secure tooling in CI/CD.

You’ll strengthen supply chain security, triage vulnerabilities and coordinate penetration tests, working with Legal to meet COPPA and GDPR requirements. Fluency in English is essential in our fully remote, multinational team.