Senior Security Engineer

Location: Hybrid in Barcelona, Passeig de Gràcia, Spain, or Paris, France; 2 remote days per week plus 15 additional remote days per year

Company

hirify.global provides an all-in-one platform for boutique fitness businesses, covering bookings, payroll, marketing, and operational management.

What you will do

• Build and maintain security controls across AWS infrastructure, Kubernetes clusters, applications, and identity systems.
• Implement automated SAST, DAST, dependency scanning, vulnerability management, and security alerting.
• Strengthen authentication and identity management, including SSO, MFA, and Google Workspace security.
• Respond to security incidents, create runbooks, and support customer security requests and enterprise questionnaires.
• Develop security training, phishing simulations, endpoint security standards, security champion programs, policies, and governance.

Requirements

• 5+ years of experience in security engineering, infrastructure security, or security software engineering.
• Hands-on experience securing AWS or GCP, including IAM, security groups, and WAF.
• Strong understanding of application security, OWASP Top 10, secure coding, and API security.
• Experience with Kubernetes, container security, infrastructure-as-code security, and at least one of Python, TypeScript, or Golang.
• Experience building security programs, responding to incidents and data breaches, and training employees on security.

Nice to have

• GDPR and data protection experience.
• Penetration testing or offensive security background.
• Experience with Django, React, PostgreSQL, Terraform, SOC 2, or ISO 27001.
• Experience responding to enterprise security questionnaires.

Culture & Benefits

• Hybrid working model with a Barcelona office and an option to work remotely on scheduled days.
• Company-paid health insurance.
• Paid sick leave.
• Gym and wellbeing access through Wellhub.
• International and collaborative work environment.

Hiring process

• Talent interview.
• Live coding interview.
• Security case study and cultural fit interview.