Senior Security Engineer

SoftCo; Dublin; Hybrid; EUR 120,000 - 180,000; Full time

Benefits offered by this job

Health insurance

Pension

Life assurance

Hybrid work model

On-site gym

Long service awards

Employee referrals

Learning & development

Job summary

SoftCo is seeking a Senior Security Engineer to own security across our SaaS product, cloud platform, and corporate environment. You will partner with the Head of Engineering and Compliance to secure development, deployment, and operations in a fast-growing AI-native P2P/AP automation company.

You will review code, shape security controls, and mentor teams while balancing security with agility. This role offers a hybrid model with a Dublin office, competitive compensation, and opportunities to

Qualifications

• 5+ years of hands-on security engineering experience in a fast-growing B2B SaaS environment.
• Proven experience securing applications and the SDLC (OWASP, SAST, DAST, SCA).
• Solid knowledge of cloud security (AWS and Azure), CI/CD pipelines, container security, IAM, and endpoint security.

Responsibilities

• Embed security across the development lifecycle with threat modelling, secure design and code reviews.
• Build and maintain security automation in CI/CD pipelines (SAST, DAST, SCA, IaC scanning).
• Lead third-party penetration testing and drive remediation with engineering teams.

Skills

Security engineering

App security

OWASP

DevOps

Cloud security

AI security

Communication

Education

CS/Info Sec degree

OSCP/OSWE/CSSLP/CISSP or equivalent

Tools

AWS

Azure

CI/CD

SAST

DAST

SCA

IAM

Job description

SoftCo is an AI- native Procure-to-Pay (P2P) and Accounts Payable (AP) automation company built for complex organisations. In a market full of rigid templates and “plug-and-play” promises, our approach is different. We tailor automation around the organisation, not the organisation around the software.

For over 35 years, we’ve helped finance teams move from reactive, manual processes to controlled, scalable and strategic P2P operations. Our AI-native platform strengthens accuracy, visibility and insight, but it’s our delivery expertise that ensures it works in the real world.

Our Success At a Glance

• 1M+ users worldwide
• Trusted by organisations including Volkswagen, Patagonia, Primark, Logitech and all 80 departments of the Finnish Government
• Global reach with offices in the US, Finland, UK, Kosovo and Ireland
• A reputation for owning where precision engineering meets long-term partnership

Join us as Senior Security Engineer and play a key role in strengthening application security across our engineering practices, helping ensure our platform remains secure, resilient, and trusted as we continue to scale globally.

Senior Application Security Engineer – Your role

We are looking for a senior, hands-on Security Engineer to own security across SoftCo: our SaaS product and the code behind it, the cloud platform it runs on, and the corporate environment our people work in. This is an individual contributor role for a technical specialist, not a management role.

You will build on the strong foundations we already have, protecting customer data, building security into how we develop and ship software, and keeping pace with emerging risks such as AI. You will be equally comfortable reviewing a pull request or tuning a cloud policy, and explaining a risk in plain language to a colleague in Finance, HR or Sales.

You will work closely with the Head of Engineering on product security and with our Compliance Officer on our certifications.

Your Responsibilities

Product and application security

• Embed security across the development lifecycle: threat modelling, secure design and code reviews, and clear secure coding standards and reusable patterns.
• Build and maintain security automation in our CI/CD pipelines, including SAST, DAST, software composition analysis and infrastructure-as-code scanning.
• Scope and manage third-party penetration testing, triage findings and drive timely remediation, with fixes tracked as tickets on engineering teams' boards.
• Act as a hands-on advisor to developers and grow a lightweight security champions network in Engineering.

Cloud and corporate infrastructure security

• Harden and monitor our production cloud environments (AWS and Azure), including identity and access management, network zoning and logging.
• Own security for our corporate environment: endpoint management (MDM), single sign-on (SSO) and access controls for employees and internal systems.
• Carry out regular technical security reviews of internal tooling, vendors and SaaS integrations.

Detection, response and emerging risk

• Lead investigation and root cause analysis for security incidents across application, cloud and corporate systems.
• Define practical policies and technical controls for safe AI use, in our product and across the business, including LLM data leakage, API key security and AI coding assistants.
• Assess the security posture of third-party AI tools adopted by internal teams, and track new attack vectors and vulnerabilities, acting on them early.

Working with the business

• Act as technical owner, alongside the Compliance Officer, for maintaining our ISO 27001, SOC 1 and SOC 2 certifications.
• Work with business teams to understand how they work and find security measures that protect us without slowing them down.
• Run practical security awareness initiatives, including defence against social engineering.
• Align the security roadmap with engineering and business priorities and report clearly on risk and progress.

Your profile

• Experience: 5+ years of hands-on security engineering experience, ideally in a fast-growing B2B SaaS environment.
• Application security: Proven experience securing applications and the SDLC (OWASP, SAST, DAST, SCA), including embedding security in Agile and DevOps teams.
• Infrastructure security: Solid knowledge of cloud security (AWS and Azure preferred), CI/CD pipelines, container security and IAM, plus practical experience securing endpoints, SSO and corporate SaaS.
• AI literacy: Good understanding of the security risks of AI and LLMs (for example prompt injection, data poisoning and privacy risk), in both product engineering and internal use.
• Communication: Able to explain technical risk clearly to non-technical colleagues and earn their trust, while holding credibility with engineers.
• Approach: Autonomous and pragmatic, balancing security requirements with the speed the business needs, with an investigative, root-cause mindset.
• Education: Degree in Computer Science, Information Security or a related field, or equivalent experience. Certifications such as OSCP, OSWE, CSSLP, CISSP or equivalent are a plus.

What We Offer

• Competitive remuneration and performance-based bonus
• Company-paid health insurance, pension and life assurance
• Hybrid Working Model (3 days per week in office following onboarding period)
• On-site gym with company-funded fitness classes (Dublin office)
• Long service incentive awards and employee referral programme
• Structured learning and development investment

Our structure gives you real ownership and direct exposure to senior leadership. Progression is based on capability, not hierarchy.

Our Culture

Our culture is built on the values that shape how we work together and how we deliver for our customers.

Initiative, accountability, and collaboration are central to how we operate. Our teams work across disciplines and locations to solve complex problems and deliver meaningful outcomes.

We encourage clear thinking, ownership and continuous learning. Expertise is respected and people are trusted to take responsibility for the work they lead.

Different perspectives strengthen our teams and improve the systems we build. We are committed to creating an inclusive environment where everyone can contribute and grow.

SoftCo is proud to be an equal opportunities employer and welcomes applications from all backgrounds. Learn more at softco.com/about-us.