Senior Security Engineer & Spain CISO — Remote

Ledn; España; Presencial; EUR 90.000 - 150.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Remote-first environment

Descripción de la vacante

Ledn is seeking a Senior Security Engineer & CISO for its Spain entity. You will own hands-on security across product, cloud, and software delivery, find vulnerabilities, and help engineers ship securely.

In addition to technical work, you will lead local information security governance, risk, and compliance activities in collaboration with risk and compliance teams. You will manage security reviews, threat modeling, and SAST/DAST tooling, while coordinating with CNMV and external auditors on

Formación

• 5+ years in security engineering, application or product security.
• Hands-on penetration testing across web applications, APIs, and cloud infrastructure.
• Threat modeling and secure design experience that translates risks into engineering requirements.
• Strong AWS security expertise in multi-account environments.
• Cloudflare edge-security experience covering WAF, rate limiting, bot management, and TLS/dns handling.
• GitHub/CI/CD security: branch protection, CODEOWNERS, tokens and dependency controls.
• Secure SDLC tooling: SAST, DAST, SCA, secret scanning, container scanning.
• Software supply-chain and IaC security review of Terraform/Helm/CI configs.
• Vulnerability lifecycle ownership from triage to remediation and retesting.
• Experience in fintech or regulated environments with audit trails and data protection.
• Fluent English and Spanish; ability to explain findings to engineers and executives.
• DORA/regulatory governance experience; CNMV exposure is a plus.
• Willing to undergo background checks as required.

Responsabilidades

• Lead security reviews for new designs and translate threats into concrete engineering requirements before code reaches production.
• Plan and execute penetration testing of web apps, APIs, mobile-facing services, and infrastructure; document findings and remediation.
• Run red-team and purple-team exercises to improve preventive controls, telemetry, detections, and response playbooks.
• Define risk-based security standards for pull requests, including secret scanning, SAST, dependency review and ownership.
• Review production code and architecture for vulnerabilities in authentication, authorization, data protection, and business logic.
• Assess and harden AWS multi-account environments with automation and policy-as-code.
• Review and harden Cloudflare security controls and edge configurations.
• Own security governance for GitHub repositories and CI workflows, including guardrails and token hygiene.
• Triage findings from testing and audits; set remediation targets and track closure.
• Support incident readiness and security enablement across engineering teams.

Conocimientos

Security engineering

Penetration testing

AWS security

Cloudflare security

GitHub security

CI/CD security

Vulnerability management

Regulatory/compliance

Bilingual English/Spanish

Herramientas

AWS

Cloudflare

GitHub

Descripción del empleo

Ledn is seeking a Senior Security Engineer & CISO for its Spain entity. You will own hands-on security across product, cloud, and software delivery, find vulnerabilities, and help engineers ship securely.

In addition to technical work, you will lead local information security governance, risk, and compliance activities in collaboration with risk and compliance teams. You will manage security reviews, threat modeling, and SAST/DAST tooling, while coordinating with CNMV and external auditors on