Technical Security Expert, Spendesk
Company spend management platform
Be an early applicant
Company spend management platform
501-1000 employees
Be an early applicant
501-1000 employees
Company mission
To liberate businesses and people to do their best work.
Role
Who you are
- Minimum 10 years of experience in information security with proven technical expertise
- Strong experience in development and code auditing, particularly in TypeScript, Node.js, and Python
- Proficiency in ElasticSearch, with the ability to deploy and maintain a multi-node Linux infrastructure from scratch
- Expertise in reverse engineering and analyzing minified or obfuscated code
- Deep knowledge of decentralized web architecture (microservices) and PaaS/SaaS providers (AWS, GCP, Datadog, Snowflake, etc.)
- Experience in penetration testing and security audits
- Strong scripting skills (Python, Bash, etc.)
- Advanced knowledge of security standards is a plus (ISO 27001, OWASP, etc.)
- Ability to work in a team and collaborate with engineers from diverse backgrounds
- Excellent communication and teaching skills
- Strong analytical and problem-solving mindset
- Ability to remain calm and act decisively in crisis situations
- Fluent English required
- French is a plus
What the job involves
- As a Technical Security Expert, you will play a key role in protecting Spendesk's information systems. Reporting to the security team, you will work closely with Spendesk's product and engineering teams to implement, monitor, and continuously improve technical security measures
- Your expertise will be essential in identifying, assessing, and remediating vulnerabilities, as well as advising and raising awareness among teams on security best practices
- Collaborate closely with development and infrastructure teams, discuss best practices, and promote a security-by-design culture in projects
- Conduct in-depth code reviews to identify and fix security vulnerabilities in TypeScript code produced by developers
- Examine third-party libraries and dependencies, analyze their behavior through reverse engineering, and detect potential security flaws or backdoors
- Perform security audits on Infrastructure-as-Code (IaC) Terraform within a multi-tenant AWS platform
- Conduct intrusion testing campaigns on the configuration of various internal company tools, including CI/CD pipelines, code management, authentication tools, etc
- Oversee, configure, and maintain the SIEM system (ElasticSearch, self-hosted, multi-node) to ensure proactive threat detection and rapid security incident response
- Plan and execute penetration tests on systems and applications to assess their resistance to attacks and propose remediation strategies
- Contribute to updating security policies, standards, and technical procedures to ensure compliance with best practices and regulatory requirements
- Supervise their implementation and promote security best practices
- Stay up to date on emerging threats, vulnerabilities, and attack techniques and recommend appropriate defense strategies
- Develop scripts and tools to automate security tasks, including incident detection and response
- Train and raise awareness among internal teams about security challenges, secure coding practices, and security tool usage
Application process
- As we are an international team, please submit your application and CV in English
Our take
Spendesk is an all-in-one spend management solution created to deliver more control, visibility, and automation to today's finance teams. Top startups like Drivy, Konbini, Dataiku or Deezer are already customers of Spendesk.
With flexible payments, approvals, automated receipt capture and real-time spend insights, the company specifically allows finance teams to decentralise operational spending across the business without any loss of control or visibility. Employees benefit from streamlined expense and invoice management through the Spendesk website and app.
Expense management platforms are becoming an increasingly crowded space, with competitors like Soldo and Expensify also building similar products. Spendesk will have to keep innovating its offerings to stay relevant. Its 2022 funding places the company in a strong position for this, and Spendesk is investing in the development and upskilling of its team and hiring new talent.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
53% employee growth in 12 months
Company
Funding (last 2 of 6 rounds)
Jan 2022
$107.8m
SERIES C
Jul 2021
$107.8m
SERIES C
Total funding: $282.8m
Company benefits
- Exciting time to join Spendesk in terms of growth and opportunities
- Equity (everyone is an owner of the company!)
- Flexible and remote-friendly work environment
- The best equipment for your needs (Macbook Pro, secondary screen, ...)
- Internal social events (hackathon, company-wide parties, offsite, ...)
- Brand-new offices in the heart of Paris, Berlin & London
- A purple Spendesk card (for your work purchases)!
- And more!
Company HQ
L'Europe, Paris, France
Leadership
Guilhem Bellion
(CTO)Previously Android Developer at Topi for 8 months and Full Stack Developer at Societe Generale for 4 years.
Rodolphe Ardant
(CEO)Previously Co-founder, COO at Wozaik for 5 years and Project Director at Sotravo for 1 year.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 14 more jobs at Spendesk