Senior Security Engineer & Spain CISO — Remote-First

Ledn; España; Remote; EUR 120,000 - 170,000; Full time

Benefits offered by this job

Equity

Remote work flexibility

PTO

Career growth

Job summary

Ledn is seeking a Senior Security Engineer & CISO (Spain) to fortify our product, cloud, and software delivery security. You will lead hands-on security work across AWS, Cloudflare, and GitHub workflows, while also serving as the Ledn Spain entity’s CISO.

The role requires collaboration with engineering, risk, and compliance teams in a regulated digital-asset environment. You will own the local Information Security Framework, report to the Board, and liaise with CNMV and external auditors on

Qualifications

• 5+ years in security engineering, product security, or software/platform engineering with a security focus.
• Hands-on penetration testing across web apps, APIs, cloud infrastructure.
• Threat modeling and secure design turning risks into engineering requirements.
• Strong AWS security expertise in multi-account environments.
• Cloudflare edge security experience including WAF, rate limiting and DNS/TLS.
• GitHub CI/CD security: branch protection, tokens, dependencies, automation.
• Secure SDLC tooling: SAST/DAST/OSS risk and secret scanning.
• Software supply-chain and IaC security reviews (Terraform/Helm).
• Vulnerability lifecycle ownership from triage to remediation and metrics.
• Experience in fintech/regulatory environments; CNMV/DORA familiarity is a plus.
• Fluent English and Spanish; ability to communicate risk to stakeholders.
• Willingness to undergo background checks per local laws.

Responsibilities

• Lead security reviews for new designs and features; translate threats into engineering requirements.
• Plan and execute hands-on penetration testing of applications, APIs, and infrastructure; document findings and validate fixes.
• Run adversarial validation with red-team/purple-team exercises to improve preventive controls and detection.
• Define risk-based security standards for pull requests including secret scanning and dependency review.
• Review production code/architecture for auth, data protection, and business logic vulnerabilities; drive root-cause fixes.
• Assess and harden multi-account AWS environments; enable automation and policy-as-code.
• Review and harden Cloudflare settings: WAF, rate limiting, DNS/TLS, edge policies.
• Own security governance for GitHub CI/CD, including CODEOWNERS and dependencies controls.
• Triage findings from testing and disclosures; set remediation targets and track to closure.
• Support incident readiness and security enablement with secure patterns and playbooks.

Skills

Security engineering

Penetration testing

Threat modeling

AWS security

Cloudflare security

GitHub security

Vulnerability management

Incident response

English & Spanish

Tools

Terraform

Helm

CI/CD tooling

Job description

Ledn is seeking a Senior Security Engineer & CISO (Spain) to fortify our product, cloud, and software delivery security. You will lead hands-on security work across AWS, Cloudflare, and GitHub workflows, while also serving as the Ledn Spain entity’s CISO.

The role requires collaboration with engineering, risk, and compliance teams in a regulated digital-asset environment. You will own the local Information Security Framework, report to the Board, and liaise with CNMV and external auditors on