Senior Security Engineer — Secure-by-Default Platform (Remote)

Spendesk; Barcelona; Híbrido; EUR 70.000 - 120.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Flexible on-site and remote policy

Latest Apple equipment

Moka.care access

Office snacks

Positive team

Location-specific benefits

Descripción de la vacante

Spendesk is building a dedicated Security Engineering function and is hiring the first senior member in this space. You will shape how we protect our platform, respond to threats, and cultivate a security-aware engineering culture from within.

This is an individual contributor role with high influence, focusing on technical depth. You will mentor an Associate Security Engineer, guide practices across squads, and serve as the security knowledge hub for engineering teams.

Formación

• Proven track record of owning security outcomes end to end across multiple domains.
• Experience across code auditing, infrastructure security (AWS/Linux), and incident response.
• Hands-on expertise with SIEM operations and security tooling.
• Ability to translate security findings into engineering-ready tools and processes.

Responsabilidades

• Own and manage vulnerability & incident management program.
• Lead security incident response, forensics, remediation coordination, and post-mortems.
• Operate and evolve our SIEM platform, including detection rules and IOC indicators.
• Drive secure development practices: threat modelling, CI/CD hardening, and secure code patterns.
• Conduct security reviews of code, IaC, and multi-tenant AWS environments.
• Develop and maintain security runbooks and operational documentation.

Conocimientos

Security architecture

Threat modelling

Incident response

Penetration testing

Scripting (Python/Bash)

Herramientas

ElasticSearch

AWS

Terraform

Okta

Descripción del empleo

Spendesk is building a dedicated Security Engineering function and is hiring the first senior member in this space. You will shape how we protect our platform, respond to threats, and cultivate a security-aware engineering culture from within.

This is an individual contributor role with high influence, focusing on technical depth. You will mentor an Associate Security Engineer, guide practices across squads, and serve as the security knowledge hub for engineering teams.