Senior Security Engineer

Valsea - Where Innovation Meets Entertainment

At Valsea, we're shaping the future of entertainment with immersive, engaging experiences that captivate players worldwide. Based in sunny Marbella, Spain, our vibrant open-space office is home to an international team of developers, marketers, product owners, and much more.

Valsea operates a leading scalable technology platform, 100% owned by us. This gives us the freedom to deliver results fast. We integrate selected outside companies into our ecosystem to ensure we provide fresh and vibrant products for our customers.

We work in a fast-paced environment, creating new brands, maintaining and improving our tech stack, launching leading acquisition and retention campaigns, and developing fresh features. Our ethos is simple - be best-in-class in everything we do.

Despite our rapid growth, Valsea still has that exciting start-up feel. We embrace a hybrid working model to balance professional growth with personal well-being. With a dynamic work environment, attractive salary, and a culture that thrives on collaboration, our power is our people.

We provide company laptops and other things you may need to work comfortably. Remote workers are always invited to our annual company trip and other team events. Ready to be part of something exciting?

What are we looking for now?

We’re hiring our first Senior Security Engineer to establish and lead the cybersecurity program at Valsea IT. We’re a diverse, international team, and we’re growing our presence in Marbella, where we enjoy regular meet-ups, events, and collaboration in our modern office. (Hybrid and remote options are also available.)

As our first dedicated security hire, you’ll have the unique opportunity to build our cybersecurity function from the ground up. You’ll define the security strategy, implement processes and controls, and work closely with engineering, compliance, and data protection teams to strengthen the security posture of our gaming technology platform.

This role combines hands-on technical work with strategic leadership. You’ll be comfortable diving into technical challenges when needed, while also driving long-term security initiatives and improvements across the organization.

What You’ll Bring

• 5+ years of experience in cybersecurity or information security roles

• Proven experience building security programs, ideally as a first security hire or in a startup environment

• Strong understanding of application security principles and secure development practices

• Experience with AWS security services and cloud security best practices

• Knowledge of security tools and technologies (SAST, SIEM, WAF, vulnerability scanners)

• Understanding of compliance frameworks (ISO 27001, PCI-DSS, GDPR, or similar)

• Excellent communication skills and ability to work cross-functionally with technical and non-technical teams

• Good command of spoken and written English - our chosen language of communication

What You’ll do

• Develop and implement our cybersecurity strategy and roadmap

• Establish and manage our vulnerability assessment program

• Coordinate and oversee penetration testing activities with external partners

• Integrate security tools into our CI/CD pipeline (SAST, dependency scanning)

• Create security policies, guidelines, and procedures aligned with industry best practices

• Work closely with compliance and data protection teams to ensure regulatory requirements are met

• Coordinate external security audits and implement recommended improvements

• Perform threat modeling during the design phase of new features and systems

• Improve our existing WAF (Cloudflare) and SIEM solutions, review alerts, and optimize protection

• Define cloud security baselines and best practices for our AWS infrastructure

• Develop and implement our Security Incident Response Program

• Assess and manage security risks from third-party vendors and integrations

• Build and deliver security awareness training for our engineering teams

• Stay current with emerging threat