Corporate Security Engineer (Fintech)

Location: Barcelona, Spain; hybrid work from the Barcelona HQ with around 10–20% of time on-site

Company

hirify.global is a privately owned fintech providing flexible payment technologies for merchants and consumers across retail, education, eyewear, repairs and travel.

What you will do

• Own the internal corporate security layer covering identities, laptops, endpoints, SaaS applications, employee access and joiner-mover-leaver processes.
• Lead corporate incident response for phishing campaigns, credential leaks and lost or stolen hardware.
• Define endpoint and device security baselines across EDR, MDM and device security practices, including detections, automated response and coverage reviews.
• Assess and harden third-party SaaS applications, improve SaaS visibility, govern OAuth connections and reduce Shadow IT.
• Own the Google Workspace security posture, including contextual access, DLP, Drive sharing, phishing protection and audit logging.
• Automate alert triage, access reviews, offboarding revocation and posture reporting while enabling IT to operate routine controls independently.

Requirements

• At least 4 years of relevant experience in corporate security, identity, endpoint security, SaaS security or security engineering.
• Hands-on ownership of an identity provider and a SASE posture, plus end-to-end experience handling at least one corporate security incident.
• Experience improving the security capability of another team through playbooks, training, security champions or control handover.
• Strong understanding of EDR, MDM, authentication and access policies, including MFA, contextual and session controls, privileged access and joiner-mover-leaver flows.
• AI usage and scripting ability for automating triage and workflow tasks with Python, Ruby on Rails, Golang or similar.
• Working-level Spanish and English required.

Nice to have

• Experience with Hexnode, DEX, Google Workspace, Vanta or DefectDojo.
• Experience evaluating or managing a SIEM or centralized log management platform.
• Exposure to PCI DSS, DORA or ISO 27001 in a regulated environment.
• Provider management, phishing simulation or security awareness program experience.
• Experience with AI assistants or automation platforms such as n8n, Claude Code or Codex.

Culture & Benefits

• Low-friction, evidence-based security culture focused on enablement, automation and cross-team delivery.
• 23 vacation days plus 2 additional personal days per year.
• Flexible compensation for transportation, restaurants and kindergarten through Cobee.
• Health insurance discounts, flexible working hours and a personal professional development budget.
• Office workshops and meet-ups supporting community participation and career growth.

Hiring process

• People Team interview, followed by a Hiring Manager interview with the Head of Engineering.
• Technical discussion based on a real corporate incident and baseline design, followed by a panel with IT and Cloud Platform.
• Target timeline: three weeks from the first call to offer.