Staff Engineer - Policy as Code (m/f/d)
SoSafe Madrid, Community of Madrid, Spain
SoSafe has the ambition to become the leading human risk management provider in Europe. Our award‐winning awareness platform triggers behavioural change by providing effective and engaging training and simulations on cybersecurity and data protection. Cybercrime is predicted to cost the world $10.5 trillion annually by 2025 – we invite you to be part of the solution!
How you'll make a difference
Lead design, implementation and maintenance of policy‐as‐code, tests, and process automation that make security controls measurable and verifiable
Build and integrate pipelines that connect product, business, compliance and security data into shared systems
Improve and simplify cross‐team processes by automating recurring checks, evidence collection and reporting
Integrate your solutions with existing workflows such as Security Operations and Security Observability
Help define and evolve a consistent internal data model for tracking security posture and control health
Contribute to or head open‐source selected components of our work to aid transparency and reusability
Participate in our in‐hours triage rotation to stay close to operational challenges and feedback loops
Collaborate with other teams on wider architectural patterns and best practices for securing multi‐tenant SaaS applications
What makes you a great fit
Genuine interest in learning security concepts and applying engineering know‐how to improve how security works in practice
Professional experience in DevOps, IT Engineer, data engineering, or similar roles supporting SaaS products
Strong programming experience in a modern language such as Python or Go (we primarily work in TypeScript)
Some knowledge of AWS services and tools such as Kubernetes, Terraform, Datadog, and Git/GitHub workflows
Experience designing or improving cross‐team processes through automation
Ability to think holistically about systems, data, and user needs – and turn that into working, maintainable solutions
Nice to haves
Professional experience working with or within a security team is a plus, but not required
Background in data management, pipelines, or internal tooling
Experience using AI tools creatively to improve efficiency and simplify work
What we offer
Work/life balance: Flexible hours, 33 vacation days
Wellbeing and financial support: Access to Open Up, corporate discounts
Connection & community: Virtual events, collaborative team activities, and opportunities for local meet‐ups
Tech equipment, referral bonuses, dog‐friendly HQ
Perks and benefits listed above are for full‐time employees and may vary slightly by office location. These are just a sample – you'll learn more during the interview process.
About Us
At SoSafe, we're on a mission to make the digital world safer by addressing the human factor in cybersecurity. As one of the fastest‐growing security awareness scale‐ups worldwide, we leverage behavioural science and data‐driven learning to empower people against cyber threats. Our Human Risk Management approach helps organisations turn their employees into their strongest line of defence. Backed by leading VCs such as Highland Europe and Global Founders Capital, we're rapidly expanding across the globe. We're looking for team players who want to drive meaningful change in cybersecurity, take ownership of their work, and grow with us. If you thrive in a vibrant, purpose‐driven environment that values innovation, diversity and collaboration, then this is the place for you!
#J-18808-Ljbffr