The English-language job board for Spain

Senior Application Security Engineer

Remote, Worldwide·Added 17 days ago

Plata Card

27 open roles

Apply

Overview

Job details

Fully remote
Per the ad.

Requirements

Have the right to work in Spain
Plata Card doesn't mention sponsorship, but this role may fit the Digital nomad visa.
Work in English
English is required, per the ad.
Have senior-level experience
Senior-level role.

Pay & benefits

What you'll get

Flexible work from one of our offices or remote
Healthcare Coverage
Education Budget: Language lessons, professional training and certifications
Wellness Budget: Mental health and fitness activity reimbursements
Vacation policy: 20 days of annual leave and paid sick leave

Visa & relocation

Relocation support to Kazakhstan, Cyprus, Serbia or Georgia with full visa & permit support to the employee and family

Requirements

What we're looking for

What makes you a great fit:

Proficient in programming languages (web/mobile)
Strong understanding of web architectures (microservices)
Deep knowledge of OWASP Top 10, threat modeling, and security testing frameworks
Familiarity with security tools such as ZAP, Dependency-Track, Burp
Strong analytical skills with precise and thorough attention to detail

Nice to have

Your bonus skills:

Security certifications (OSCP, OSWE, GWAPT, GCPN)
Contributions to or experience with bug bounty or ethical-hacking programs
SaaS or cloud-native environments experience
Familiarity with Kubernetes or container security

The role

We are looking for an Application Security Engineer to join our Information Security team.

The Information Security team is responsible for protecting Plata's products, systems, and data by embedding security throughout the technology lifecycle. We work closely with engineering teams to identify and mitigate security risks, strengthen application defenses, and ensure security is integrated into every stage of software development.

As an Application Security Engineer, you will serve as a key link between development and security teams, designing, implementing, and maintaining robust application security controls. You'll help embed security across the entire software development lifecycle - from design and development to testing and deployment - while continuously improving our application security practices.

Challenges that await you:

What you'll do

Collaborate with Dev & Ops teams. Guide secure coding practices, participate in code reviews, and embed security seamlessly into the SDLC
Conduct security reviews & threat modeling. Analyze application architecture, define threat models, and drive proactive risk identification
Integrate security tools. Deploy and manage SAST, DAST, IAST, RASP, and SCA tools within CI/CD pipelines to automate early detection and remediation
Handle security incidents
Implement "shifting left" strategies, enforce continuous testing, fast remediation, and embed security culture across teams
Educate and train. Conduct workshops to elevate developer security awareness and promote adherence to OWASP, ASVS, and secure design standards

About Plata Card

Plata Card is a Mexican fintech company that provides digital payment and credit solutions, primarily through a mobile app and a physical card. The company focuses on financial inclusion, offering credit products to underserved segments in Mexico. It operates with a technology-driven approach, building its own software and data infrastructure to manage risk, customer support, and product development.

In Spain, Plata Card has established a significant technology and operations hub in Madrid, where it hires for roles in engineering, data, risk, and IT support. The company's culture emphasizes automation, data-driven decision-making, and agile development. For international professionals, the Madrid office offers opportunities to work in a fast-growing fintech with a Latin American focus, often requiring Spanish language skills but also valuing diverse technical expertise.

Founded: 2018
Employees: 500–1,000
Headquarters: Mexico City, Mexico
In Spain: Madrid
Website: platacard.mx

Good to know if you are moving

Plata Card's Madrid office is a key technology hub, offering roles in engineering, data, and IT, which may provide opportunities for international professionals to work in a Spanish-speaking environment.
The company focuses on financial inclusion, which can be appealing for professionals interested in impactful fintech work.
Many roles require proficiency in Spanish, but some technical positions may be open to English speakers, depending on the team.
The company uses modern tech stacks like Golang and cloud-based data warehousing, offering exposure to current technologies.
As a growing fintech, there may be opportunities for career advancement and taking on significant responsibilities early on.

In their own words

About the company & team

Our ways of working:

Innovative Spirit: A commitment to creativity and groundbreaking solutions
Honest Feedback: valuing open, transparent communication
Supportive Team: a strong, collaborative community
Celebrating Achievements: recognizing our wins together
High-Tech Environment: a team full of smart and revolutionary people who date to challenge the status quo of incumbent finances

All open roles at Plata Card