Technical Security Expert, Spendesk
Company spend management platform
Open for applications
Company spend management platform
201-500 employees
Open for applications
201-500 employees
Company mission
To liberate businesses and people to do their best work.
Role
Who you are
- Minimum 10 years of experience in information security with proven technical expertise
- Strong experience in development and code auditing, particularly in TypeScript, Node.js, and Python
- Proficiency in ElasticSearch, with the ability to deploy and maintain a multi-node Linux infrastructure from scratch
- Expertise in reverse engineering and analyzing minified or obfuscated code
- Deep knowledge of decentralized web architecture (microservices) and PaaS/SaaS providers (AWS, GCP, Datadog, Snowflake, etc.)
- Experience in penetration testing and security audits
- Strong scripting skills (Python, Bash, etc.)
- Advanced knowledge of security standards is a plus (ISO 27001, OWASP, etc.)
- Ability to work in a team and collaborate with engineers from diverse backgrounds
- Excellent communication and teaching skills
- Strong analytical and problem-solving mindset
- Ability to remain calm and act decisively in crisis situations
- Fluent English required
- French is a plus
What the job involves
- As a Technical Security Expert, you will play a key role in protecting Spendesk's information systems. Reporting to the security team, you will work closely with Spendesk's product and engineering teams to implement, monitor, and continuously improve technical security measures
- Your expertise will be essential in identifying, assessing, and remediating vulnerabilities, as well as advising and raising awareness among teams on security best practices
- Collaborate closely with development and infrastructure teams, discuss best practices, and promote a security-by-design culture in projects
- Conduct in-depth code reviews to identify and fix security vulnerabilities in TypeScript code produced by developers
- Examine third-party libraries and dependencies, analyze their behavior through reverse engineering, and detect potential security flaws or backdoors
- Perform security audits on Infrastructure-as-Code (IaC) Terraform within a multi-tenant AWS platform
- Conduct intrusion testing campaigns on the configuration of various internal company tools, including CI/CD pipelines, code management, authentication tools, etc
- Oversee, configure, and maintain the SIEM system (ElasticSearch, self-hosted, multi-node) to ensure proactive threat detection and rapid security incident response
- Plan and execute penetration tests on systems and applications to assess their resistance to attacks and propose remediation strategies
- Contribute to updating security policies, standards, and technical procedures to ensure compliance with best practices and regulatory requirements
- Supervise their implementation and promote security best practices
- Stay up to date on emerging threats, vulnerabilities, and attack techniques and recommend appropriate defense strategies
- Develop scripts and tools to automate security tasks, including incident detection and response
- Train and raise awareness among internal teams about security challenges, secure coding practices, and security tool usage
Application process
- As we are an international team, please submit your application and CV in English
Our take
Spendesk is an all-in-one spend management solution created to deliver more control, visibility, and automation to today's finance teams. Top startups like Drivy, Konbini, Dataiku or Deezer are already customers of Spendesk.
With flexible payments, approvals, automated receipt capture and real-time spend insights, the company specifically allows finance teams to decentralise operational spending across the business without any loss of control or visibility. Employees benefit from streamlined expense and invoice management through the Spendesk website and app.
Expense management platforms are becoming an increasingly crowded space, with competitors like Soldo and Expensify also building similar products. Spendesk will have to keep innovating its offerings to stay relevant. But with substantial funding to its name along with a number of strategic partnerships (including Visa), the company is making sure it stays ahead of the competition.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
53% employee growth in 12 months
Company
Funding (last 2 of 6 rounds)
Jan 2022
$113.8m
SERIES C
Jul 2021
$113.8m
SERIES C
Total funding: $295.3m
Company benefits
- Transport reimbursement: Monthly contributions to your transport card (metro, bus or train)
- Offsites and events: Regular team events to exchange with other Spendeskers and get to know each other better
- Annual leave: 28 days per year to rest and relax
- €50 on your Spendesk card: To buy anything you need for work
- For Spendeskers with kids: Generous parental leave & a lot of flexibility for working parents
- Great offices: In the hearts of Berlin, London, Madrid, and Paris
Company HQ
L'Europe, Paris, France
Leadership
Axel Demazy
(CEO)Joined Spendesk in 2024 as CEO. Prior to this, they spent over 4 years at Jellsmack as the COO and General Manager and over 8 years at the Boston Consulting Group as a Partner.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 10 more jobs at Spendesk