DevSecOps Engineer, Edpuzzle

• 2-3 years of relevant professional experience: we’re looking for a combination of experience in hands-on technical roles (Software Engineer or DevOps/SRE) with experience in security-related duties
• Experience in programming languages (JavaScript, TypeScript or Node.js)
• Knowledge of cloud security best practices and tools in AWS
• Experience working in a product company or a web application development team
• Familiarity with at least one major security framework like NIST, ISO 27001, SOC2 or privacy compliance standards like GDPR
• Experience in securing web applications by identifying and mitigating vulnerabilities like SQL injection, XSS, and CSRF
• Bachelor’s or Master’s degree in Computer Science, Computer Engineering, or a related field
• You are based in Spain and have a work permit to work in Spain

Desirable

• We’re looking for our next Security Engineer to join our Security and Infrastructure Team in Spain
• Reporting directly to the Security Engineering Manager, you’ll play a crucial role in increasing our security capacity and will be responsible for safeguarding our networks, systems, and products
• This role is perfect for a Software, DevOps or Site Reliability Engineer looking to pivot to a career in the Security field
• You’ll get to work across a diverse range of critical initiatives focused on the design and implementation of security solutions across various systems, networks, and products
• While your strength and focus will be in product security, your scope will also include internal security tool development and regulatory compliance to ensure that both data and the company's product are protected from unauthorized access, cyber attacks, data breaches, and other vulnerabilities
• Design and implement security measures for systems, networks, and web applications
• Oversee threat identification and guide security incident response planning
• Lead security evaluations, vulnerability assessments, and penetration tests
• Automate tasks, analyze data, develop security tools and contribute to the product’s codebase
• Assist in maintaining compliance with industry regulations
• Partner with Engineering teams for secure feature development and system integration
• Understand product functionalities to enhance security
• Stay up to date on emerging security technologies and trends
• Assist in developing and delivering security training to employees
• Participate in identifying and mitigating vulnerabilities
• Evaluate third-party security risks
• Performs other duties as assigned