Overview
PagoNxt is looking for a Application Security Engineer, based in our Boadilla del Monte (Madrid) office.
We embrace a strong risk culture and all of our professionals at all levels are expected to take a proactive and responsible approach toward risk management.
This position is for the Payments Hub team. We are extending our cloud native payments processing platform to Santander banks and other financial institutions, aiming to provide a single access to most domestic and international payment methods at global scale.
If you would like to join a global community of world-class payment experts, this is the place for you. This is a unique opportunity to work for a company that combines innovative technology of a FinTech with the reach and expertise of a leading global financial institution.
What you will be doing
As an Application Security, you will play a strategic role in shaping the security foundation of our global payment platform. You will drive security development, design decisions, and technical roadmaps to ensure application security is embedded by default. You will work closely with engineering, platform, and product leaders to define and execute a long-term application security vision—shifting security left, automating prevention and detection, and reducing risk at scale. This is a highly autonomous role with direct impact on secure platform growth.
Your responsibilities
* Design and implementation of scalable, secure-by-design software development lifecycle.
* Define and evolve our application security strategy, balancing automation, risk reduction, and developer enablement.
* Drive adoption of security tooling and automation in CI / CD: SAST, DAST, SCA and so on.
* Standardize threat modeling, secure code review practices, and appsec design reviews.
* Establish and maintain reusable patterns for secure API design, authentication / authorization, data protection, and secrets management.
* Provide technical mentorship to engineers and security champions across the organization.
* Stay ahead of emerging threats, vulnerabilities, and technologies relevant to fintech and cloud-native systems.
Required qualifications
Must-Have :
* Team-oriented and collaborative mindset
* Experience in application security, software security architecture, or a senior engineering role with strong security focus.
* Hands-on experience with security tools and cloud-native environments
* Experience integrating security tooling.
* Strong background in modern appsec practices : OWASP, threat modeling, crypto, identity, API security, SAST / DAST / SCA.
* Proficient in at least one programming language, especially Java (e.G., Python, Java, Go, Node.Js).
* Excellent communication skills in English (written and spoken), capable of influencing technical and non-technical stakeholders.
Nice-to-Have
* Certifications such as OSWE, CSSLP, CISSP, AWS Security Specialty.
* Some understanding of offensive security or pentesting would be advantageous.
* Experience working in regulated environments (PCI-DSS, ISO 27001, SOC 2).
* Familiarity with tools like Semgrep, Burp, ZAP, Snyk.
Additional details
* Seniority level: Mid-Senior level
* Employment type: Full-time
* Job function: Information Technology
* Industries: Technology, Information and Internet
We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.
#J-18808-Ljbffr