Senior Security Engineer

Job title: Senior Security Engineer

We are seeking a hands-on Senior Security Engineer to drive bsport's security transformation. This is not a purely strategic role—you'll roll up your sleeves to implement security controls, respond to incidents, and build our security program from the ground up, protecting ~10 million users' personal data. You’ll work with the SRE and software teams to accelerate security while enabling enterprise growth.

What You'll Do

• Hands-on Security Engineering (60%): Harden AWS infrastructure, Kubernetes clusters & app security. Implement automated scanning & dependency checks. Strengthen authentication & identity management. Set up vulnerability management & alerting integrated with engineering sprints. Respond to security incidents, create runbooks & support customer security requests.
• Security Culture & Training (40%): Promote a strong security mindset across the company: Build engaging, role-specific training & run phishing simulations. Define & enforce hardware & endpoint security standards. Develop a network of security champions & self-service guides. Create pragmatic policies & governance that balance security with business needs.

What We're Looking For

• 5+ years in security engineering, infrastructure security, or security software engineering roles.
• Strong hands-on experience with AWS or GCP security.
• Deep understanding of application security.
• Experience building security programs from scratch in fast-growing startups or scale-ups.
• Proven track record in incident response and handling data breach scenarios.
• Good programming skills.
• Experience with infrastructure security.
• Prior experience training employees on Security.

Nice to Have

• Experience with GDPR compliance and data protection regulations.
• Background in penetration testing or offensive security.
• Familiarity with our tech stack.
• Experience responding to security questionnaires for enterprise sales.
• SOC2 or ISO27001 implementation experience.

Compensation & Benefits

• Vibrant office in Barcelona with free drinks and snacks.
• Flexible working model, hybrid with 2 remote days per week, plus 15 extra remote days per year.
• Health insurance fully covered by the company.
• Negotiated gym deal with access to a wide range of gyms and wellbeing apps.
• Diverse, collaborative international team.
• Paid sick leave.