Senior DevSecOps Engineer (Spain)

About This Opportunity

We are representing a confidential fintech infrastructure organization seeking a Senior DevSecOps Engineer based in Spain. This is a security-first role for an experienced professional who will own the operational execution of security across cloud environments, developer pipelines, and compliance operations. You will be the hands-on owner of day-to-day security posture, partnering with engineering and infrastructure teams while maintaining your core focus as a security practitioner.

This is a full-time position open to candidates in Spain, with options for office-based work in Madrid or fully remote arrangements within the country. We are seeking professionals with 6–8 years of security engineering experience.

Responsibilities

Cloud and Infrastructure Security

• Own security across AWS environments (primary focus), with exposure to GCP and Vercel, including IAM, Security Hub, CloudTrail, GuardDuty, and KMS
• Design, maintain, and monitor security controls: logging pipelines, alerting, key management, and privileged access workflows
• Manage security-relevant access controls, service accounts, credential rotation, and periodic access reviews
• Provide security guidance on network segmentation, endpoint security baselines, and cross-system access policies

Application and Developer Security

• Secure CI/CD pipelines and GitHub Actions environments, including secrets management and supply chain risk mitigation
• Perform secure code reviews and provide hands-on application security support
• Review authentication flows, payment logic, and API security with critical judgment
• Partner with engineers to remediate vulnerabilities and embed security practices into development workflows

Vulnerability and Incident Management

• Own end-to-end vulnerability management: identification, prioritization, remediation tracking, and verification
• Coordinate external security review programs with third-party audit and penetration testing firms
• Support incident response through internal triage and investigation

Compliance and Audit Support

• Support SOC 2 and other compliance efforts by collecting evidence and documenting controls
• Contribute to DORA compliance initiatives where applicable
• Maintain clear, auditable documentation of security processes

What We're Looking For

Required Qualifications

• 4–8 years of experience as a security engineer with a clear security-first background
• 3+ years of hands-on experience securing AWS environments: IAM, Security Hub, CloudTrail, GuardDuty, and KMS
• Strong practical knowledge of CI/CD security: GitHub Actions, secrets scanning, and dependency management
• Experience with secure code review or core application security concepts (OWASP, authentication flows, API security)
• Experience working within at least one compliance framework (SOC 2 preferred; ISO 27001 or similar acceptable)
• Fluent communicator who can work productively with developers and IT engineers
• Self-directed and organized with strong follow-through
• Experience using AI-assisted tools such as Claude or GitHub Copilot for security automation or research
• Ability to work flexible hours if incidents arise

Preferred Qualifications

• Experience at a fintech, payments, or crypto company
• Familiarity with DORA or MiCA compliance requirements
• Exposure to blockchain or crypto-specific security considerations
• Prior experience where security work intersected with IT or infrastructure teams

Success Indicators

• Ability to take security issues from identification through remediation with minimal guidance
• Prioritize based on risk and impact, not urgency alone
• Contribute meaningfully to cross-functional conversations without needing to own other domains
• Document processes clearly for audit readiness and team knowledge transfer
• Push back on insecure practices while offering practical alternatives
• Know when to escalate versus handle independently

How We Work With You

Our talent team at Get A Job.ai partners exclusively with clients seeking exceptional security engineering talent. When you apply through our platform:

• A dedicated recruiter will conduct an initial screening to understand your background and career goals
• We will prepare and submit your profile to our client with our professional endorsement
• We coordinate the interview process and provide guidance at each stage
• Please do not attempt to contact the client directly, as all communication is managed through Get A Job.ai to ensure a professional process for all candidates

Our client offers extensive benefits including unlimited paid time off, parental leave, health and dental insurance fully covered, company laptop and home equipment allowance, flexible tax benefits, company off-sites, and extensive access to leading AI tools integrated into daily workflows.

Pay

Base salary range: €85,000 - €110,000 EUR annually, determined during the interview process based on experience and fit. Stock options are granted on top of base salary. The organization conducts two performance reviews annually addressing bonuses, promotions, and market-based salary adjustments.

Get A Job.ai is an equal opportunity recruiter. We encourage applications from candidates of all backgrounds and believe that diverse perspectives strengthen the teams we help build. Research shows that some candidates apply only when they meet 100% of qualifications—we welcome your application if you meet around 75% of the listed requirements, as skills can be learned and potential matters.