Associate Security Engineer

Experteer Overview As a Security Engineer at Spendesk, you will help build the security backbone of a fintech platform used across Europe.You will work hands-on across vulnerability management, identity controls, monitoring, and secure development support, collaborating closely with a Senior Security Engineer and cross-functional teams.The role focuses on translating compliance guidance into practical security improvements within product and infrastructure.You’ll fix and improve systems from week one, avoiding purely governance tasks and driving real risk reduction.This position offers growth in a fast-paced, security-first environment that values practical impact and collaboration.Compensaciones / Beneficios * Triage vulnerabilities from bug bounty, scanners, and dependency checks; support incident response with fixes and post-mortems; monitor security alerts from SIEM.* Implement and maintain SSO/MFA configurations using Okta and Google Workspace; manage roles, access rights, and periodic audits; manage production secrets and credential rotation.* Run pre-deployment security checks (static analysis, dependency scanning, container image scanning); enforce security reviews and help engineers remediate findings.* Monitor and tune SIEM/monitoring rules; operate SIEM infrastructure (ElasticSearch, log pipelines); escalate and respond to suspicious activity.* Coordinate pentest activities: prepare test environments and track remediation; maintain security runbooks and procedures.Responsabilidades * Foundational experience in security engineering, SOC, or DevOps/SRE with a security focus.* Solid understanding of web application security (OWASP Top 10).* Hands-on with at least two: vulnerability scanning tools, SIEM/log analysis, IAM systems (Okta, Google Workspace), or CI/CD security tooling.* Scripting competence (Python, Bash, or similar) for automation.* Collaborative mindset with clear, constructive security communication and risk articulation.Requisitos principales * Flexible on-site and remote policy * Latest Apple equipment * Moka.care for wellbeing * Great office snacks * Location-specific benefits (health insurance, wellness allowances, commuter support, meal vouchers, gym memberships)

Responsabilidades * Foundational experience in security engineering, SOC, or DevOps/SRE with a security focus.

• Solid understanding of web application security (OWASP Top 10).
• Hands-on with at least two: vulnerability scanning tools, SIEM/log analysis, IAM systems (Okta, Google Workspace), or CI/CD security tooling.
• Scripting competence (Python, Bash, or similar) for automation.
• Collaborative mindset with clear, constructive security communication and risk articulation. Requisitos principales * Flexible on-site and remote policy * Latest Apple equipment * Moka.care for wellbeing * Great office snacks * Location-specific benefits (health insurance, wellness allowances, commuter support, meal vouchers, gym memberships)