Senior Security Engineer - Emburse

Emburse; Barcelona; Presencial; EUR 90.000 - 130.000; Jornada completa

Descripción de la vacante

Emburse seeks a Senior Security Engineer to strengthen its security posture across an AI-powered spend platform. You will lead incident response, manage security tooling, and embed shift-left security with engineering teams.

The role offers impact at scale in a fast-paced environment; you will collaborate across functions to protect users and data, with emphasis on cloud security, DevSecOps, and secure coding practices.

Formación

• Senior security leadership experience.
• Experience with ISO 27001, NIST, PCI DSS.
• Experience with DevSecOps and secure code development.
• Strong analytical and problem-solving abilities.

Responsabilidades

• Manage security tools and systems (SIEM, IDS/IPS, endpoint protection, vulnerability management).
• Monitor, analyze, and triage security events, alerts, and logs.
• Perform incident response activities including containment, eradication, recovery, and documentation.
• Investigate incidents, determine root cause, and recommend remediation.
• Execute incident response playbooks and SOPs.
• Triage and manage bug bounty submissions, code scanning results, and vulnerability findings.
• Collaborate with engineering/product teams to embed shift-left security in SDLC.
• Assist with internal/external vulnerability scanning, segmentation testing, and penetration testing.
• Create and maintain security metrics and leadership-facing dashboards.
• Stay current with threats and best practices; propose security enhancements.
• Administer IAM systems with least privilege and periodic access reviews.
• Develop and maintain policies for privileged account management.

Conocimientos

Incident response

DevSecOps

Cloud security

Python scripting

Security leadership

Threat analysis

Strong communicator

Herramientas

SIEM

IDS/IPS

Vulnerability scanners

AWS

Azure

GCP

Descripción del empleo

In this role, you strengthen Emburse’s security posture across an AI-powered spend platform. You will lead incident response, manage security tooling, and drive secure coding practices with engineering teams. You’ll embed shift-left security in the software lifecycle and mentor peers to raise security standards. The role offers impact at scale, collaborating cross-functionally to protect users and data. You’ll work in a fast-paced, solutions-driven environment that values innovation and resilience.

• Manage security tools and systems (SIEM, IDS/IPS, endpoint protection, vulnerability management)
• Monitor, analyze, and triage security events, alerts, and logs
• Perform incident response activities including containment, eradication, recovery, and documentation
• Investigate incidents, determine root cause, and recommend remediation
• Execute incident response playbooks and SOPs
• Triage and manage bug bounty submissions, code scanning results, and vulnerability findings
• Collaborate with engineering/product teams to embed shift-left security in SDLC
• Experience with DevSecOps, DevOps, CI/CD pipelines, and secure code development
• Assist with internal/external vulnerability scanning, segmentation testing, and penetration testing
• Create and maintain security metrics and leadership-facing dashboards
• Stay current with threats and best practices; propose security enhancements
• Administer IAM systems with least privilege and periodic access reviews
• Develop and maintain policies for privileged account management
• Senior security leadership experience
• Strong knowledge of security principles and technologies (network security, encryption, access control, vulnerability management)
• Extensive experience with SIEM, IDS, and vulnerability scanners
• Deep cloud security knowledge (AWS, Azure, GCP)
• Scripting/automation in Python, PowerShell, or Bash
• Incident response and forensics experience
• Knowledge of ISO 27001, NIST, PCI DSS
• Excellent analytical and problem-solving abilities
• Strong written and verbal communication to non-technical stakeholders
• Self-starter with minimal supervision
• Ability to work in large cross-functional teams
• SIEM, IDS/IPS, endpoint protection, vulnerability management
• Cloud security (AWS, Azure, GCP)
• Incident response and forensics

Senior Security Engineer - Emburse • barcelona, catalunya, es