Senior Security Engineer(Hybrid)

bsport is an all-in-one platform combining boutique fitness and advanced technology. Our platform helps partners manage their bookings, payroll, marketing and more, to streamline operations and boost their commercial success.
We're scaling rapidly to become the #1 tech partner for boutique studios in Europe and beyond. With this growth comes the critical need to strengthen our security posture, protect our users' data, and build a security-first culture across the organization.
We're looking for a hands-on Senior Security Engineer who will be the driving force behind bsport's security transformation. This is not a purely strategic role - you'll be rolling up your sleeves to implement security controls, respond to incidents, and build our security program from fundamentals.
We need someone who can immediately reduce our exposure to data leaks, phishing, and unauthorized access while building sustainable security practices that scale with our growth.
You’ll directly protect ~10 million users’ personal data
Hands-on Security Engineering (60% of your time)
Immediate priorities (first 3-6 months):
Harden our

AWS

infrastructure and application security
Audit and improve IAM configurations and policies
Work with the SRE team to secure our Kubernetes clusters and container images
Drive and maintain state-of-the-art security posture across backend, frontend, and user data management in collaboration with SWE teams, ensuring best-in-class protection for our systems and users.
Deploy and configure email security solutions within existing Google Workspace
Create automated alerting for suspicious behaviors patterns using Grafana/ELK
Implement dependency scanning for our Python/Django backend and React frontend
Design and implement security alerting using our existing Grafana/ELK stack
Create runbooks for common security incidents (data leaks, phishing, unauthorized access)
Security Culture & Training (40% of your time)
Design and deliver security training programs
Create engaging, practical security training for all employees
Develop role-specific training (engineering, sales, customer success, operations)
Run simulated phishing campaigns and use results to improve training
Define and enforce security standards for employee devices (Mac, Linux, Windows)
Work with IT/HRs to ensure secure device provisioning using Primo
Create security baseline configurations for different roles
Security champion network
Maintain security documentation and update it as we scale
#

5+ years in security engineering, infrastructure security, or security software engineering roles

• Strong hands-on experience with AWS or GCP security (IAM, security groups, WAF, etc.)
• Deep understanding of application security (OWASP Top 10, secure coding, API security)
• Proven track record in incident response and handling data breach scenarios
• Good programming skills (at least one of Python, Typescript, Golang)
• Experience with infrastructure security (Kubernetes, container security, IaC security)
• Prior experience training employees on Security

Experience with GDPR compliance and data protection regulations
Background in penetration testing or offensive security
Familiarity with our tech stack (Django, React, PostgreSQL, Terraform)
AWS
Infrastructure as Code: Terraform, Helm
Kubernetes, Docker
Monitoring: Grafana, ELK stack
Backend: Python Django, FastAPI, Celery
Frontend: React, TypeScript (mono-repos, module federation)
Databases: PostgreSQL, Redis, RabbitMQ, Kafka
CI/CD: GitLab CI, ArgoCD
Hybrid model with remote days to support balance and flexibility.
Private health insurance
We offer fully-funded Alan private health coverage so you can focus on what matters most.