Spendesk · Finance
Senior Security Engineer
- London (Hybrid), +2 more: Barcelona, Paris
Still open on Spendesk's site · checked just now
- Level
- Senior
- Posted
What you'll do
As written by Spendesk · Read the original
Your Mission
You'll be the security conscience for engineering: building tooling, training developers, and partnering with Infrastructure on secure-by-default solutions. You own the technical security roadmap: partnering with the compliance team to identify risks, translating findings into actionable engineering-native tools and processes, driving remediation, and raising the bar across the organisation.
This is a pure engineering role, not governance or compliance: a separate team owns policy and risk frameworks. It's an individual contributor track with high influence, focused on technical depth, not people management. You'll mentor an Associate Security Engineer, shape practices across squads, and be the go-to person when engineering teams need security guidance.
You'll be hands-on across the full security surface from day one. As the team grows, you'll move from day-to-day operations toward architecture, strategy, and mentoring, acting as the escalation point for the Associate Security Engineer.
Requirements
Must-haves
A track record of owning security outcomes end to end, with hands-on experience across at least three of: code auditing, infrastructure security (AWS/Linux), penetration testing, SIEM operations, incident response.
Ability to own a roadmap: identify priorities, build a plan, execute autonomously, and communicate progress to non-specialists.
Deep understanding of modern web architectures (microservices, cloud-native, PaaS/SaaS) and where they break.
Strong scripting and automation ability (Python, Bash, or similar).
Experience mentoring other engineers or security practitioners.
Excellent communication: you can explain a CVSS 9.8 to a PM and get them to prioritise it.
Nice-to-haves
Experience with ElasticSearch / ELK stack in production.
Familiarity with AWS, GCP, Snowflake, Datadog, Okta.
Knowledge of security standards and frameworks (ISO 27001, OWASP, SOC 2, PCI-DSS).
Experience in a regulated fintech or payments environment.
Reverse engineering and analysis of minified/obfuscated code.
Not ticking every box? We’d still love to hear from you. At Spendesk, we value skills, potential and diverse experiences. If this role excites you and you believe you could contribute, we encourage you to apply."
As we are an international team, please submit your application and CV in English.
Skills
Stack
- Python
- TypeScript
- JavaScript
- AWS
- Google Cloud
- Terraform
Working languages
English
Salary & benefits
About our benefits
Our culture is built on trust, empowerment, and growth — with benefits to match!
Flexible on-site and remote policy
Latest Apple equipment — the tools you need to excel
Access to Moka.care — for emotional and mental health wellbeing
Great office snacks — to fuel your day
A positive team to work with daily!
We also offer location-specific benefits tailored to each market, including health insurance, wellness allowances, commuter support, meal vouchers, and gym memberships — ensuring you're well supported wherever you're based.
Company
Last checked . The details above were extracted automatically; the employer's original posting is the authority.
