Senior Security Engineer

Salary: £30,000 - 32,000 per year

Requirements:

• Track record of owning security outcomes end to end, with hands-on experience across at least three of: code auditing, infrastructure security (AWS/Linux), penetration testing, SIEM operations, incident response.
• Ability to own a roadmap: identify priorities, build a plan, execute autonomously, and communicate progress to non-specialists.
• Deep understanding of modern web architectures, including microservices, cloud-native, PaaS, and SaaS, and where they break.
• Strong scripting and automation ability, such as Python, Bash, or similar.
• Experience mentoring other engineers or security practitioners.
• Excellent communication skills, with the ability to explain complex security issues to non-technical stakeholders.
• Experience with ElasticSearch / ELK stack in production is a plus.
• Familiarity with AWS, GCP, Snowflake, Datadog, or Okta is a plus.
• Knowledge of security standards and frameworks such as ISO 27001, OWASP, SOC 2, or PCI-DSS is a plus.
• Experience in a regulated fintech or payments environment is a plus.
• Reverse engineering and analysis of minified or obfuscated code is a plus.

Responsibilities:

• Own and operate our bug bounty program, including platform management, escalation thresholds, and strategic improvements.
• Act as the escalation point for vulnerability triage and lead complex or high-severity findings.
• Lead security incident response, including qualification, forensics, fraud investigations, fix coordination, post-mortems, and resolution tracking.
• Own our SIEM platform, including architecture, detection rules, and indicators of compromise.
• Build and evolve detection coverage with a focus on signal quality and reduced manual toil.
• Build and maintain security runbooks and operational documentation.
• Own IAM implementation and operations for product and infrastructure systems, including SSO/MFA configuration, access-rights implementation, periodic permission reviews, and secrets rotation.
• Embed security into the development lifecycle through threat modelling, secure code patterns, and CI/CD hardening.
• Conduct technical security reviews of code, infrastructure-as-code, and multi-tenant AWS environments.
• Drive security tooling in CI/CD by designing and owning automated gates such as SAST, SCA, container scanning, and AI-generated code risk detection.
• Assess and govern AI tooling adoption across engineering, including security standards for code assistants and LLM-powered workflows.
• Conduct AI-specific threat modelling.
• Coordinate and execute penetration tests and security audits, including environment preparation, auditor management, and post-audit action plans.
• Drive remediation within the qualification rules and timeframes set by the security governance team.
• Coach engineers on secure development through workshops, secure-code guidance, and design reviews.
• Surface security risks and recommendations to engineering leadership and own the security backlog and roadmap.
• Partner with Infrastructure on secure-by-default solutions.
• Mentor an Associate Security Engineer and act as the escalation point as the team grows.

Technologies:

• AI
• AWS
• Bash
• CI/CD
• Cloud
• Datadog
• ELK
• ElasticSearch
• GCP
• IAM
• Support
• LLM
• Linux
• OWASP
• PaaS
• Python
• Security
• Snowflake
• Web
• microservices
• NodeJS
• Terraform
• TypeScript

More:

We are Spendesk, the AI-powered spend management and procurement platform transforming company spending. We help thousands of companies manage procurement, payment cards, expenses, invoice processing, and accounting automation with a single intelligent solution, giving finance leaders visibility and control across company spend, including multi-entity structures. We operate across the United Kingdom, France, Spain, and Germany, and support over 200,000 users across brands such as Payfit, Accor, Welcome to the Jungle, Swile, Big Mamma, Malt, and Yousign. We offer a flexible on-site and remote policy, latest Apple equipment, access to Moka.care for emotional and mental health wellbeing, great office snacks, a positive team, and location-specific benefits such as health insurance, wellness allowances, commuter support, meal vouchers, and gym memberships. We value liberation, ownership, kindness, curiosity, and a positive mindset, and we are committed to building a diverse, equal, and inclusive team where everyone feels welcome.

last updated 34 week of 2026