Senior Security Engineer

Gelato; Barcelona; Presencial; EUR 70.000 - 90.000; Jornada completa

Descripción de la vacante

A leading global printing technology firm is seeking a Senior Security Engineer to enhance the security of the Gelato platform for millions of users. The role involves collaborating with product and tech teams, conducting vulnerability assessments, and promoting a security-sensitive culture. Candidates should have significant experience in cybersecurity and a strong background in incident response and vulnerability management. Proficiency in cloud security, automation, and communication skills is essential.

Servicios

Dynamic and diverse work environment

Overall positive culture of collaboration

Formación

• 7+ years of experience in cybersecurity, with at least 3 years in incident response or vulnerability management roles.
• Proven experience with vulnerability management tools.
• Strong practical automation and scripting capabilities using Python, PowerShell, or Bash.

Responsabilidades

• Collaborate with Product Design and Software Engineering to ensure timely delivery of security features.
• Conduct vulnerability scans and penetration testing.
• Monitor and respond to security incidents.

Conocimientos

Cybersecurity expertise

Incident response

Vulnerability management

Cloud security

Automation and scripting

Communication skills

Strategic thinking

Crisis management

AI-first mindset

Educación

Degree in Computer Science or similar

Master’s degree

Herramientas

SIEM

WAF

IAM

SOAR

EDR

AWS Security Specialty

Cloudflare

Descripción del empleo

About Gelato

Gelato has created the world’s largest global network for on-demand production of custom products – from t-shirts and mugs to books and wall art. We empower a new generation of ecommerce entrepreneurs to share their creativity worldwide while embracing local, sustainable production. By producing locally and perfectly matching supply with demand, we eliminate waste and reduce carbon emissions.

At Gelato, we don’t own production facilities – we build the software that connects them. With over 140 production partners in 32 countries, our network can deliver custom products to five billion people in just 72 hours. It’s smarter, faster, and greener.

With GelatoConnect, our SaaS platform, we’re driving innovation in print production. GelatoConnect simplifies operations for print producers by automating procurement, workflows, and logistics into one seamless system. By boosting efficiency and cutting costs, it helps businesses scale to meet market demands. With GelatoConnect, we’re reshaping the print industry to be more efficient, sustainable, and profitable.

The position

Following our global expansion, we are looking for a passionate Senior Security Engineer to join our effort of protecting Gelato and, most importantly, our customer's data.

We are looking for a person who wants to make the Gelato platform safer for millions of users around the world. We’d love to talk to you if you’re a talented individual who is passionate about finding security weaknesses and crafting scalable and usable solutions. We are enablers who make it easier for engineers to create secure-by-design services, not blockers.

Reporting directly to the Head of Information Security, you will work closely with Product Managers and Tech Engineers.

What you’ll be doing

• Collaborate closely with Product Design and Software Engineering to align with security features, roadmaps and ensure timely delivery.
• Identify vulnerabilities and develop innovative, scalable solutions to enhance our defense-in-depth strategy. This involves conducting vulnerability scans and penetration testing.
• Promote a security-conscious culture by educating all Gelato employees on security best practices.
• Monitor and respond to security incidents, including the regular analysis of potential threats.
• Identify, document and measure security risk, effectively communicate these risks to senior leadership, and influence remediation plans.
• Participate in an on-call rotation to provide timely response and escalation for security incidents outside of business hours, ensuring continuous protection and monitoring coverage.
• Develop, tune, and maintain security monitoring and detection systems (IAM, SIEM, SOAR, WAF, EDR) to identify suspicious activity, anomalies, and potential threats.
• Manage the full vulnerability management lifecycle, including identification, prioritisation, remediation tracking, and verification of closure.
• Contribute to security architecture reviews and the design, deployment, and hardening of security controls across infrastructure, cloud, and applications.
• Introduce automation and orchestration to streamline detection, response, and compliance activities through scripting (Python, PowerShell, Bash).
• Support governance and compliance activities such as audit preparation, evidence collection, and control testing against frameworks like ISO27001, SOC 2, NIST CSF, and CIS Controls.
• Hands‑on experience designing and implementing secure AWS cloud architectures.
• Integrate AI and LLM technologies into daily security workflows to automate repetitive analysis, improve threat detection, and support rapid incident response.

Who you are

• A degree (Master’s is a plus) in Computer Science, a similar technical field of study, or equivalent practical experience
• Broader certification coverage, including CISSP, CISM, GIAC (GCIH, GCIA, GCFA), CCSP, or equivalent advanced credentials.
• 7+ years of experience in cybersecurity, with at least 3 years in hands‑on incident response, detection, or vulnerability management roles.
• Proven experience with SIEM, WAF, IAM, SOAR, EDR, and vulnerability management tools.
• Cloud security specialisation, ideally with certifications such as AWS Security Specialty
• Demonstrated expertise in incident response, including investigation, containment, and coordination across cross‑functional teams.
• Embraces an AI‑first mindset, leveraging AI and LLM tools to drive efficiency and innovation in daily work.
• Strong crisis management and communication skills, able to remain composed under pressure and communicate clearly with both technical and non‑technical stakeholders.
• Good understanding of implementation requirements for ISO27001 and / or SOC2.
• Strong practical automation and scripting capabilities using Python, PowerShell, or Bash to enhance detection and response efficiency.
• Experience designing and implementing production services, APIs, or security‑specific libraries.
• Familiarity with cloud solutions, including AWS and GCP, and prior experience with tools like Cloudflare, ELK stack, and Burpsuite Professional, as well as scripting and programming skills, are required.
• Strong strategic thinking, planning, and organisational skills.
• Fluency in English with excellent verbal and written communication abilities is a mandatory requirement.

What it’s like to work at Gelato

We are a customer‑obsessed team with the ambition to change the world by connecting technology to the printing industry and making it much more sustainable. Everyone who joins our team must feel genuinely intrigued and motivated by our mission. We expect a lot. We are a driven team with big goals, so we seek individuals who are genuinely passionate about their work and possess an entrepreneurial spirit. Our culture is unique and we live by our values, so it's worth learning more about our culture and how we work before presenting your application.

At Gelato, we pride ourselves on our global presence with 14 offices worldwide, fostering a dynamic and diverse work environment. Rooted in a culture that values collaboration, creativity, and camaraderie, we actively cultivate a company culture that thrives on shared experiences. We encourage team members to embrace this culture by working from our inspiring office spaces at least three days a week, allowing for meaningful connections and collective growth.

Lastly, we ask that you please upload your CV in English , regardless of which country you are applying from.