Senior Security Engineer

If you are a talented Senior Security Engineer and would be interested in working on a product loved and used by **40+ million monthly active users**, this job is for you

**Who are we?**
**About the Team**:
The Core Platform team is responsible for developing shared services and tools to improve the productivity of our engineering teams and the quality of our platform. The team consists of back-end and DevOps engineers who develop the core infrastructure used by all other teams within Smallpdf.

**What you will do**:

- As Security Engineer at Smallpdf, you will help ensure that our software and systems are designed and implemented to the highest security standards
- You will perform technical security assessments, code reviews, vulnerability testing and advanced monitoring to highlight risks, helping Smallpdf to improve security
- You will also work closely with other engineers to design and build proactive methods, tooling and piece of code to enhance our security

**Responsibilities**:

- Explore the problem space and innovate solutions to solve systemic problems
- Partner with internal product teams to continuously improve our product
- Conduct research to identify new attack vectors against Smallpdf products and services
- Develop technical solutions to help mitigate security vulnerabilities
- Promote and advise security and secure practices throughout Smallpdf
- Perform investigations on a wide variety of sources and events to determine whether they are threats to Smallpdf
- Contribute to the certification and audit processes

**Requirements**:

- Bachelor degree in Computer Science or equivalent practical experience
- Technical knowledge of security engineering, computer and network security, authentication and security protocols
- Expertise with threat hunting, threat modelling and web app pentesting
- Familiarity with common vulnerabilities (OWASP, etc..)
- Experience working with cloud providers (AWS, GCP, etc..)
- Experience coding / scripting in one or more general purpose languages including but not limited to: Go, Python, JavaScript, Terraform, etc..
- Fluent English
- Swiss or EU passport holder (or other permits that allow you to work in Switzerland)

**Nice to have**:

- Experience with CI/CD tools and workflows (Jenkins, Github Actions, CircleCI, Gitlab CI, etc..)
- Experience working with Golang
- Container security related experience

**Why Smallpdf?**
You get to impact the way over 40 million people get work done every month.
Push boundaries and dare to fail—that’s how we learn
Enjoy hybrid work environment, you can work both from home and in the office, but there is a minimum of 4 days per quarter when you are expected to meet up with your team, work together in synergy and strengthen your team bond.
Private health insurance cover on us—one less thing to worry about
Unlimited vacation days—yep, you read that right—plus year-end company holidays.
Need a long break? We offer sabbatical leave to employees who’ve been with us for over 2 years.
16 weeks parental leave—100% of your salary—for all new parents
Don’t leave your four-legged friends at home, our offices are pet-friendly
A personal development budget of up to 1,850 Euros every year, plus 8 days off for courses or training.
Possibility of an employee stock ownership plan (ESOP). (Conditions apply.)
Hack days to challenge you and your team, plus build amazing things.
Chatting over tapas, grabbing a glass of wine, enjoying the many museums, or going for a dip in the sea—we’re pretty serious about having fun

Said to be even older than Rome, Barcelona is the city that has it all, from sandy beaches to beautiful historical architecture to exciting nightlife. If you like to be surrounded by a vibrant atmosphere full of culture and art, sunny skies, and people from all over the world, Barcelona is the place for you—and so is Smallpdf.