Senior Security Engineer
hace 1 día
Marbella
Senior Security Engineer Experiencia, cualificaciones y habilidades interpersonales, ¿tiene todo lo necesario para triunfar en esta oportunidad? Descúbralo a continuación. We’re hiring our first Senior Security Engineer to establish and lead the cybersecurity program at Valsea IT. As our first dedicated security hire, you’ll have the unique opportunity to build our cybersecurity function from the ground up. Both hybrid in Marbella and fully remote within the EU are available. What You’ll Do • Develop and implement our cybersecurity strategy and roadmap, • Establish and manage our vulnerability assessment program, • Coordinate penetration testing activities with external partners, • Integrate security tools into our CI/CD pipeline (SAST, dependency scanning), • Create security policies, guidelines, and procedures aligned with industry best practices, • Work closely with compliance and data protection teams to ensure regulatory requirements are met, • Coordinate external security audits and implement recommended improvements, • Perform threat modeling during the design phase of new features and systems, • Improve our existing WAF (Cloudflare) and SIEM solutions, review alerts, and optimize protection, • Define cloud security baselines and best practices for our AWS infrastructure, • Develop and implement our Security Incident Response Program, • Assess and manage security risks from third‑party vendors and integrations, • Build and deliver security awareness training for our engineering teams, • Stay current with emerging threats and security trends in the gaming and fintech industries What You’ll Bring • 5+ years of experience in cybersecurity or information security roles, • Proven experience building security programs, ideally as a first security hire or in a startup environment, • Strong understanding of application security principles and secure development practices, • Experience with AWS security services and cloud security best practices, • Knowledge of security tools and technologies (SAST, SIEM, WAF, vulnerability scanners), • Understanding of compliance frameworks (ISO 27001, PCI‑DSS, GDPR, or similar), • Excellent communication skills and ability to work cross‑functionally with technical and non‑technical teams, • Good command of spoken and written English Preferred (Not Required) • Experience in the gaming, gambling, or fintech industries, • Experience managing bug bounty programs (HackerOne, Bugcrowd, etc.), • Security certifications (CISSP, CEH, OSCP, or similar), • Scripting/automation skills (Python, Bash, etc.) for security tooling, • Experience with Infrastructure as Code security (Terraform, CloudFormation), • Knowledge of container security (Docker, Kubernetes), • Understanding of fraud prevention and detection mechanisms, • Startup personality: smart, ethical, friendly, hard‑working and proactive What We Offer • Hybrid working model or fully remote, • Innovative international company with cutting‑edge tech equipment, • Collaborative teams and agile multicultural environment, • Competitive salary with flexible working hours, • 23 paid vacation days + public holidays, • Private health insurance for you and your family, • Free online English/Spanish lessons, • Corporate events throughout the year, • Ongoing learning and professional development opportunities In‑office perks • Daily breakfast and freshly cooked lunch 3 days a week, • 50% discount on personal training sessions and physiotherapy sessions, • Games room, full kitchen with hot drinks, fruit, soft drinks, • Gym, massage room and much more At Valsea, we want diversity and inclusion in an environment where unique perspectives and new talents thrive. Please consult our Privacy Notice to learn more about how we collect, use and transfer the personal data of our candidates. This position is available both as a hybrid position in Marbella (Spain) or as a fully remote position from inside the EU. Please note that we are unable to sponsor work visas outside the EU. If you'd like to apply, please go ahead! Any questions, just get in touch. xcskxlj Please do include a cover letter - just a few short sentences on how you see us working together. #J-18808-Ljbffr