We're looking for a hands-on Senior Security Engineer to lead the security transformation and build security foundations from scratch.

🎯 Responsibilities

1. Protect the personal data of approximately 10 million users
2. Enable the sales team to effectively answer security questionnaires for enterprise clients
3. Work collaboratively within the SRE team, partnering with software engineering and other department leaders
4. Reduce business risk by proactively preventing and responding to security incidents in a fast-scaling environment

🛠️ What you'll do

1. Security Engineering (60%)Harden AWS infrastructure, Kubernetes clusters, and application security
2. Implement automated scanning (SAST/DAST) and dependency checks
3. Strengthen authentication and identity management (SSO, MFA, Google Workspace)
4. Set up vulnerability management and alerting, integrated with engineering sprints
5. Respond to security incidents, create runbooks, and support customer security requests
6. Security Culture & Training (40%)Develop and deliver engaging, role-specific training; run phishing simulations
7. Define and enforce hardware and endpoint security standards
8. Build a network of security champions and create self-service security guides
9. Create pragmatic policies and governance that balance security with business needs

🧰 Tech Stack

1. AWS
2. Infrastructure as Code: Terraform, Helm
3. Container orchestration: Kubernetes, Docker
4. Monitoring: Grafana, ELK stack
5. Backend: Python Django, FastAPI, Celery
6. Frontend: React, TypeScript
7. Databases: PostgreSQL, Redis, RabbitMQ, Kafka
8. CI/CD: GitLab CI, ArgoCD

🛠️ Requirements

1. 5+ years of experience in security engineering, infrastructure security, or security software engineering
2. Hands-on expertise with AWS or GCP security (IAM, security groups, WAF, etc.)
3. Deep understanding of application security (OWASP Top 10, secure coding, API security)
4. Experience building security programs from the ground up in high-growth environments
5. Track record in incident response and handling data breach scenarios
6. Programming skills in at least one language: Python, TypeScript, or Golang
7. Experience securing infrastructure (Kubernetes, containers, IaC security)
8. Experience training employees on security best practices

➕ Nice to have

1. Experience with GDPR compliance and data protection regulations
2. Background in penetration testing or offensive security
3. Familiarity with Django, React, PostgreSQL, Terraform
4. Experience responding to security questionnaires for enterprise sales
5. Knowledge of SOC2 or ISO27001 implementation

🤗 We offer

1. Vibrant office environment with complimentary drinks and snacks
2. Flexible hybrid working model with two remote days per week, plus 15 additional remote days per year
3. Health insurance fully covered
4. Discounted gym membership via Wellhub, with access to various gyms and wellbeing apps
5. Collaborative, international team
6. Paid sick leave to support your health

1. 👋🏼Interview with Talent
2. 🧑🏽‍💻Live Coding
3. 🔐Security case study
4. 🤝 Cultural fit