Senior Security Engineering Manager | FinTech

Ebury helps ambitious businesses unlock global growth, and we take the same approach with our people. We encourage innovation and movement, collaboration and problem-solving, and foster an environment where everyone can feel they belong, are valued, supported and empowered to succeed. Senior Security Engineering Manager ~

Location:
Madrid
- Hybrid
- 4 days onsite, 1 remote Established in 2009, Ebury is a London-based financial technology company specialising in cross-border financial services for SMEs. Our comprehensive suite includes international payments, foreign exchange risk management, business lending, and mass payment solutions, all delivered via an integrated digital platform. Backed by Banco Santander (54% majority stake) and recognized in the Financial Times’ list of Europe’s Fastest-Growing Companies, Ebury employs over 1,700 professionals across 40+ offices in 25+ countries. Our success is powered by diverse, high-performing teams revolutionising global fintech. Ebury is investing heavily in product and platform security across our global financial services ecosystem. Security Engineering is a deeply technical, hands-on discipline that partners directly with software and platform engineers to build security into every stage of the release lifecycle. This team focuses purely on core engineering challenges—not GRC, policy writing, IT desktop security (e.g., You will lead a distributed team of elite security engineers spanning cloud security, penetration testing, and software development. Your mandate covers high-impact engineering domains: vulnerability management, AI threat modelling, secure software development lifecycles (SSDLC), agentic SDLC workflows, disaster recovery planning (DRP), and cloud infrastructure hardening. Reporting to the Engineering Director – Platform & Security, you will balance strategic architectural leadership with deep technical execution to safeguard our services in a high-scale, regulated fintech environment. Leadership & Security Architecture Team Leadership: Manage, recruit, and mentor a global team of security engineers, fostering technical excellence and clear career progression paths. Architecture Design: Define and implement high-level security architecture across existing systems and greenfield projects. Engineering Alignment: Partner with Software Engineering and Platform leadership to embed security requirements into roadmaps and sprint cycles. Technical Rigour: Stay actively hands-on—conduct architecture design reviews, review critical code, and act as the final decision-maker on complex technical security trade-offs. Deliver measurable, data-backed metrics and reporting on technical security posture to executive stakeholders. Secure Software Development Lifecycle (SSDLC) & AI Workflows Define and scale the SSDLC strategy, integrating automated security testing (SAST, DAST, SCA) seamlessly into CI/CD pipelines. Design and evolve guardrails and secure frameworks tailored for modern agentic software development and AI-assisted workflows. Vulnerability Management & Red Teaming Remediation Drive: Partner with engineering managers to resolve systemic and critical vulnerabilities, unblocking blockers and escalating when timelines slip. Direct AI-assisted tooling strategies, including continuous scanning pipelines and internal automated red-teaming platforms. Identity & Access Management (IAM) IAM Architecture: Direct identity and access management architecture across multi-cloud infrastructure and customer-facing microservices. Privileged Access: Ensure authentication, authorisation, least privilege, and Privileged Access Management (PAM) controls strictly satisfy compliance and internal audit benchmarks. Cloud & Network Security Posture Platform Partnership: Collaborate closely with Platform Engineering to define security guardrails on AWS and GCP (network segmentation, perimeter defence, container runtime security). Change Governance: Review and sign off on high-risk architectural changes across platform and cloud network boundaries. Support technical external audits and close compliance gaps (ISO 27001, SOC 2, DORA) through direct engineering implementations rather than paperwork. 8+ years of total experience across software engineering, platform engineering, or security engineering, including 3+ years directly managing engineering teams. ~ Former software engineer or technical security specialist who transitioned into engineering management while retaining deep technical fluency. ~ Proven track record designing, building, and running security controls at scale across public clouds ( AWS and/or GCP ) and container orchestration systems ( Kubernetes ). ~ Hands-on mastery of secure coding practices, modern DevSecOps integration, threat modelling, and federated identity protocols (OAuth2, OIDC, SAML). Proven ability to translate high-level business risk into prioritised, actionable engineerin