Senior Security Engineer (Team Lead)

Stack

Responsibilities

• ▹Ship hands-on security work during the first three months and learn Glia's platform, its specific security challenges and how the Platform group operates
• ▹Co-own the company security roadmap with the Security Leader, balancing domains by risk
• ▹Get to know the team, the tooling and the project delivery methodologies
• ▹After the ramp-up, step into the team lead role (about 60% leadership, 40% hands-on): own security programs end-to-end, from roadmap shaping to adoption
• ▹People work: run 1:1s, manage performance and grow the team
• ▹Application and product security: threat modelling, secure SDLC, design and code review, supply chain security
• ▹Infrastructure and cloud security: AWS posture, runtime security, IAM, close collaboration with the Infrastructure team
• ▹Security automation and AI: develop and own automation and AI tooling supporting security goals, and secure AI-assisted development practices and LLM tooling
• ▹Endpoint and corporate security: developer endpoint security (MDM, privilege, software governance) and secrets hygiene
• ▹Whole-posture assessment: run framework-based assessments (CIS Controls) and turn findings into prioritised, engineering-consumable plans
• ▹Connect technical work to compliance needs (SOC 2, PCI-DSS, ISO 42001)
• ▹Mentor engineers, lead blameless post-mortems for security incidents, and present to and align senior management

Requirements

• ▹Credible hands-on experience in at least two security domains (e.g. AppSec plus cloud/infra) and literacy across the rest; you think in overall posture and risk, not tools
• ▹You have built or scaled a security program end-to-end (process, tooling, adoption), ideally in a low-structure environment
• ▹Coding and automation ability (Python preferred) and cloud security depth (AWS)
• ▹Experience with AI-assisted development and with securing it: LLM tooling (e.g. MCP), AI governance awareness
• ▹Leadership readiness with evidence (mentoring, deputising for a lead, or formal lead experience) and the commitment to step up as DevSec Team Lead after ramp-up, owning the team's delivery while staying technical
• ▹An educator and multiplier, not a gatekeeper: you enjoy high-empathy collaboration with developers
• ▹Located in Europe

Nice to have

• ▹Framework-based posture assessment experience (CIS Controls, NIST CSF, or similar): you can run an assessment and turn it into a prioritised roadmap
• ▹Pentest, audit and compliance exposure (SOC 2, PCI-DSS, ISO 42001)
• ▹Terraform/Kubernetes; endpoint/MDM and IdP experience

Soft skills

What we offer

• ▹Glia stock options and competitive salary
• ▹Professional development support (trainings, courses, conferences, books, etc.)
• ▹Transparent career development system
• ▹Different options for your working preferences (office, remote, flexible)
• ▹Access to all the latest tools and equipment you need
• ▹Sports compensation, reimbursement for therapy and counseling sessions
• ▹Team events: annual employee awards, internal hackathons and a dozen events from cooking to the Glia olympic games
• ▹Generous referral bonuses

About the company

Glia is the #1 Banking AI platform, trusted by 700+ banks and credit unions. The DevSec team owns developer-facing and platform security as part of the Platform group.