Senior Security Engineer

Experteer Overview As a Senior Security Engineer at Spendesk, you will shape the first dedicated security function, driving technical security from day one and building a security-aware engineering culture.You’ll own the security roadmap, partner with Infrastructure and Compliance to translate findings into engineering-focused tools and processes, and mentor the Associate Security Engineer.This is a hands-on IC role that evolves toward architecture, strategy, and escalation leadership as the team grows.You’ll partner across squads to protect our platform and respond to threats with real impact.Compensaciones / Beneficios- Own and operate the bug bounty program and drive strategic improvements- Lead vulnerability triage and act as escalation point for high-severity findings- Lead security incident response including forensics, remediation coordination, post-mortems- Own SIEM architecture, rules, and detection coverage (ElasticSearch, Linux)- Develop and maintain security runbooks and operational docs- Own IAM implementation and operations for product and infrastructure systems- Embed security into the development lifecycle with threat modelling and secure CI/CD- Coordinate penetration tests and security audits and drive post-audit actions- Coach engineers on secure development and surface security risks to leadership- Partner with Infrastructure on secure-by-default solutionsResponsabilidades- Experience owning security outcomes end-to-end across multiple areas (code auditing, infrastructure security, pentesting, SIEM, incident response)- Ability to own a roadmap and execute autonomously with clear communication to non-specialists- Deep understanding of modern web architectures (microservices, cloud-native, PaaS/SaaS)- Strong scripting/automation skills (Python, Bash, or similar)- Experience mentoring engineers or security practitioners- Excellent communication skills (ability to explain CVSS ratings to PMs)Requisitos principales- Flexible on-site and remote policy- Latest Apple equipment- Moka.Care for wellbeing- Office snacks- Location-specific benefits (health insurance, wellness, commuter support, meal vouchers, gym)

Ability to own a roadmap and execute autonomously with clear communication to non-specialists

• Deep understanding of modern web architectures (microservices, cloud-native, PaaS/SaaS)
• Strong scripting/automation skills (Python, Bash, or similar)
• Experience mentoring engineers or security practitioners
• Excellent communication skills (ability to explain CVSS ratings to PMs)Requisitos principales
• Flexible on-site and remote policy