Technical Security Expert

Навыки

• AWS
• Bash / shell
• CI/CD
• Datadog / New Relic
• Elasticsearch
• Форензика и реагирование
• Google Cloud

О компании и продукте

• Spendesk is the AI-powered spend management and procurement platform that transforms company spending. By simplifying procurement, payment cards, expense management, invoice processing, and accounting automation, Spendesk sets the new standard for spending at work. Its single, intelligent solution makes efficient spending easy for employees and gives finance leaders the full visibility and control they need across all company spend, even in multi-entity structures. Trusted by thousands of companies, Spendesk supports over 200,000 users across brands such as SoundCloud, Gousto, SumUp, and Bloom & Wild. With offices in the United Kingdom, France, Spain and Germany, Spendesk also puts community at the heart of its mission.
• For more information: www.spendesk.com/press
• We believe that people do their best work when they’re given the freedom to thrive and grow. That’s why liberation is at the core of everything we do. We empower Spendeskers to take ownership of their work, to navigate ambiguity, and seize every opportunity. Spendeskers come from all over the world (35+ countries and counting!) but we have plenty in common: we're bold, ever-curious, committed to kindness, and tackle every challenge with a positive mindset.
• Our culture is built on trust, empowerment, and growth — with benefits to match!

Задачи

• As a Technical Security Expert , you’ll have a direct impact on the security posture of one of Europe’s fastest-growing fintechs
• You’ll work hand-in-hand with product and engineering teams to embed security into everything we build
• You’ll combine hands-on technical work with knowledge sharing, helping us stay ahead of threats in a constantly evolving landscape
• Champion security-by-design: Advise and collaborate with development and infrastructure teams to embed security best practices from the start of every project
• Lead technical security reviews
• Conduct in-depth code reviews (TypeScript, Node.js, Python) to uncover and remediate vulnerabilities
• Analyze third-party libraries and dependencies, including reverse engineering when needed
• Review Infrastructure-as-Code (Terraform) and multi-tenant AWS setups
• Drive security audits & testing
• Plan and execute penetration tests and intrusion campaigns on systems, applications, and internal tools (CI/CD, authentication, etc.)
• Propose actionable remediation strategies to strengthen our defenses
• Own security monitoring
• Oversee and maintain our SIEM (ElasticSearch, multi-node Linux)
• Develop automation tools and scripts for proactive threat detection and incident response
• Shape security culture: Help update policies and procedures, and raise awareness across teams through coaching, workshops, and communication
• Stay ahead of threats: Monitor emerging vulnerabilities and attack techniques, and recommend adaptive defense strategies
• Why Spendesk?
• At Spendesk, we’re building the leading spend management platform for modern businesses, processing billions of euros across Europe and beyond
• Security is at the heart of what we do : our customers trust us to safeguard their financial data, and we’re committed to raising the bar for security in fintech

Требования

• Extensive technical experience in information security, with hands-on expertise in at least two of the following: code auditing (TypeScript/Node.js/Python), infrastructure security (AWS/Linux/Terraform), penetration testing, or SIEM management
• Deep understanding of secure development practices and modern web architectures (microservices, cloud/PaaS/SaaS)
• Strong scripting ability (Python, Bash, etc.)
• Experience with ElasticSearch in production environments
• Excellent communication and collaboration skills
• ability to explain complex security concepts to diverse audiences
• Fluent English

Будет плюсом

• Experience with reverse engineering and analysis of minified/obfuscated code
• Knowledge of security standards (ISO 27001, OWASP, etc.)
• Experience with GCP, Datadog, or Snowflake
• French language skills
• Not ticking every box?
• We’d still love to hear from you
• At Spendesk, we value skills, potential and diverse experiences
• As we are an international team, please submit your application and CV in English

Паспорт вакансии

История публикации

Откуда что взялось

Отмечено то, что вывели мы. Без пометки — значение назвал работодатель.

Почему на этом месте в выдаче

Порядок выдачи объявлен контрактом: свежесть решает между днями, полнота и зарплата — внутри дня.