Senior IT Security Engineer

About the role

Codeway is looking for a Senior IT Security Engineer to shape and mature security across its fast‑growing organization. Based in Barcelona, you will work at the intersection of IT, security, and engineering, designing and implementing controls for identity, endpoints, SaaS platforms, and cloud infrastructure.

Key responsibilities

• Partner with IT and engineering teams to strengthen security monitoring, detection, and incident‑response capabilities.
• Investigate security events, coordinate response activities, and continuously improve playbooks and processes.
• Develop security metrics and reporting to provide visibility, support risk management, and demonstrate control effectiveness.
• Enhance identity and access controls, including governance, privileged access management, MFA, conditional access, and device trust.
• Establish endpoint security standards, monitoring, and remediation processes.
• Maintain and improve cloud security controls and drive a secure‑by‑default approach.
• Build and operate a sustainable vulnerability management program.

Required profile

• Several years of hands‑on experience in IT security, preferably in a fast‑growing tech environment.
• Strong analytical mindset with the ability to translate security requirements into practical solutions.
• Excellent collaboration skills to work closely with cross‑functional teams.
• Self‑starter attitude, comfortable shaping security foundations as the company scales.

Required skills

• Identity and Access Management (IAM) concepts and tools.
• Privileged Access Management (PAM) solutions.
• Multi‑Factor Authentication (MFA) and conditional access policies.
• Endpoint security standards and remediation techniques.
• Vulnerability management processes.
• Cloud security best practices and tooling.