Security Engineer

Security Engineer 📍 Madrid (Hybrid – 3 days in the office) | Permanent About the company Our client is an established European financial technology group whose platforms help banks and private banks run their investment businesses. They work with a large base of financial institutions across Europe, and their products handle sensitive client and financial data every day. That means security sits at the core of what they deliver. They’re growing their Madrid team and want a Security Engineer to help strengthen and scale their security function. The role You’ll be a hands-on member of the security team, working closely with engineering, infrastructure and compliance colleagues to protect the company’s platforms, cloud environments and data. You’ll find and fix risks, and you’ll also help build security into how software is designed, built and run. What you’ll be doing - Designing, implementing and maintaining security controls across cloud and on-premise infrastructure - Embedding security into the SDLC: threat modelling, secure code reviews and security tooling in CI/CD pipelines (SAST, DAST, dependency and container scanning) - Monitoring, investigating and responding to security events and incidents - Managing vulnerabilities, from identification and prioritisation through to remediation with engineering teams - Strengthening identity and access management, network security and secrets management - Supporting audits and regulatory requirements relevant to financial services (e.g. DORA, ISO 27001, GDPR) - Producing clear documentation, runbooks and guidance, and helping lift security awareness across the business What we’re looking for - Proven experience in a Security Engineering, Cloud Security, DevSecOps or similar role - Strong knowledge of at least one major cloud platform (AWS, Azure or GCP) and its security services - Hands-on experience with security tooling such as SIEM, EDR, vulnerability scanners and WAFs - Solid understanding of networking, Linux/Windows hardening, IAM and encryption - Scripting or automation skills (e.g. Python, Bash, PowerShell, Terraform) - Familiarity with containers and orchestration (Docker, Kubernetes) - Good communication skills and the ability to influence technical and non-technical colleagues - Fluent English; Spanish is a plus Nice to have - Experience in financial services or another regulated industry - Certifications such as CISSP, OSCP, CCSP, CEH or cloud security certifications - Exposure to ISO 27001, SOC 2 or DORA compliance work What’s on offer - Competitive salary and benefits package - Hybrid working: 3 days a week in the Madrid office - The chance to shape security at an established, growing fintech - Training, certification support and clear career progression - An international, collaborative team