🎯 What you’ll own & the role

Build Security from the ground up!!

We're looking for a hands-on Senior Security Engineer who will be the driving force behind bsport's security transformation.

This is not a purely strategic role, you'll be rolling up your sleeves to implement security controls, respond to incidents, and build our security program from fundamentals.

This role is critical because:

1. You'll directly protect ~10 million users' personal data.
2. You'll enable our sales team to confidently answer security questionnaires as we pursue enterprise clients.
3. You’ll work in the SRE team, with close collaboration with SWE teams and exposure to most if not all department leaders.
4. You'll reduce business risk in a fast-scaling environment where security incidents can damage trust and revenue.

What you'll do?

🛠️ Hands-on Security Engineering (60%)

Drive and maintain top-notch security across our platform:

1. 🔒 Harden AWS infrastructure, Kubernetes clusters & app security.
2. ⚡ Implement automated scanning (SAST/DAST) & dependency checks.
3. 🛡️ Strengthen authentication & identity management (SSO, MFA, Google Workspace)
4. 🕵️‍♂️ Set up vulnerability management & alerting integrated with engineering sprints.
5. 🚨 Respond to security incidents, create runbooks & support customer security requests.

👥 Security Culture & Training (40%)

Promote a strong security mindset across the company:

1. 🎓 Build engaging, role-specific training & run phishing simulations.
2. 💻 Define & enforce hardware & endpoint security standards.
3. 🤝 Develop a network of security champions & self-service guides.
4. 📜 Create pragmatic policies & governance that balance security with business needs.

🧰 Stack:

1. AWS
2. Infrastructure as Code: Terraform, Helm
3. Container orchestration: Kubernetes, Docker
4. Monitoring: Grafana, ELK stack
5. Backend: Python Django, FastAPI, Celery
6. Frontend: React, TypeScript
7. Databases: PostgreSQL, Redis, RabbitMQ, Kafka
8. CI/CD: GitLab CI, ArgoCD

🦄 You might be a great fit if:

1. 5+ years in security engineering, infrastructure security, or security software engineering roles.
2. Strong hands-on experience with AWS or GCP security (IAM, security groups, WAF, etc.).
3. Deep understanding of application security (OWASP Top 10, secure coding, API security).
4. Experience building security programs from scratch in fast-growing startups or scale-ups.
5. Proven track record in incident response and handling data breach scenarios.
6. Good programming skills (at least one of Python, Typescript, Golang)
7. Experience with infrastructure security (Kubernetes, container security, IaC security)
8. Prior experience training employees on Security.

Nice to have:

1. Experience with GDPR compliance and data protection regulations.
2. Background in penetration testing or offensive security.
3. Familiarity with our tech stack (Django, React, PostgreSQL, Terraform)
4. Experience responding to security questionnaires for enterprise sales.
5. SOC2 or ISO27001 implementation experience.

What we offer

🌅 Vibrant office in Barcelona - Passeig St. Joan with free drinks and snacks to fuel your mornings and recharge during breaks.

🤸‍♀️ Flexible working model, hybrid setup with 2 remote day per week, plus 15 extra remote days per year.

💌 Health insurance fully covered by the company.

🏋🏽‍♀️ Negociated gym deal with Wellhub: get access to a wide range of gyms, studios, and wellbeing apps.

🌍 A diverse, collaborative workplace, join an international team!

🛏️ Feel supported with paid sick leave, because your health always comes first.

1. 👋🏼Interview with Talent
2. 🧑🏽‍💻Live Coding
3. 🔐Security case study
4. 🤝 Cultural fit