Job Opportunities API

ABOUT CODEWAY Codeway builds consumer apps used by millions around the world, spanning AI creativity, wellness, learning, and productivity. Our products are built with a strong focus on user experience, speed, and quality, and are powered by deep in-house technology and data capabilities. Barcelona is a growing core hub for Codeway. We are building a strong engineering culture here, focused on ownership, fast execution, and high standards of craft. This is a place for engineers who want to stay close to the product, influence real decisions, and see their work reach users quickly. POSITION We’re looking for a Senior IT Security Engineer to help build and mature security across our growing organization. This role sits at the intersection of IT, Security, and Engineering, helping design, implement, and continuously improve security controls across identity, endpoints, SaaS platforms, and cloud infrastructure. You’ll work closely with IT and Engineering teams to build security capabilities that support company growth while maintaining a practical, collaborative, and business-friendly security posture. This is a hands-on role with meaningful opportunities to shape security foundations, improve processes, and influence how security evolves across the organization. Several security capabilities are still early in their maturity and continuing to evolve. We are looking for someone who enjoys building and improving the programs, processes, controls, and automation that will form the foundation of our security function as the company scales. We welcome applicants from all backgrounds and experiences. If you’re excited about building security capabilities and believe you could be a strong fit for the role, we encourage you to apply, even if your experience does not align perfectly with every qualification listed below. WHAT YOU’LL BE DOING? SECURITY OPERATIONS & INCIDENT RESPONSE - Partner with teams to strengthen security monitoring, detection, and response capabilities. - Investigate security events, coordinate incident response activities, and continuously improve operational playbooks and response processes. - Develop security metrics and reporting that provide visibility, support prioritization and risk management, and demonstrate the effectiveness of security controls. IDENTITY, ENDPOINT & SAAS SECURITY - Strengthen security controls across identity, endpoint, and business-critical SaaS platforms. - Improve identity and access controls, including governance, privileged access management, MFA, conditional access, and device trust. - Establish endpoint security standards, monitoring capabilities, and remediation processes. - Partner with stakeholders to evaluate security considerations for new applications, vendors, and integrations. CLOUD SECURITY & VULNERABILITY MANAGEMENT - Maintain and enhance security controls across cloud environments while promoting secure-by-default approaches. - Build and operate a sustainable vulnerability management process across infrastructure, cloud, endpoint, and SaaS environments, including prioritization, remediation tracking, and reporting. - Review cloud configurations, permissions, and security risks, partnering with teams on practical remediation strategies and secure-by-design approaches. SECURITY ENGINEERING & PROGRAM DEVELOPMENT - Design and implement automation that improves security operations and reduces manual effort. - Build integrations and workflows across security, identity, endpoint, and cloud platforms. - Contribute to architecture reviews, security standards, and long-term security roadmaps. - Support security governance, compliance, and audit readiness initiatives by helping implement, document, and maintain effective security controls and processes. - Partner with teams across the organization to promote secure working practices and help foster a positive security culture. WHAT YOU’LL BRING? - Experience building, oper