# Senior IT Security Engineer at Codeway

> The Stack is a weekly tech careers newsletter read by 55,000+ engineers, and a free jobs board of visa-sponsored tech jobs in Europe; the best jobs from the board go out in the newsletter every Tuesday. This is one job from the board.

> Responsibilities: - Design, implement, and iterate security

- **Company:** Codeway (https://jobs.trythestack.co/companies/codeway)
- **Location:** Spain
- **Work arrangement:** On-site
- **Employment type:** Full-time
- **Experience level:** 5–10 years
- **Visa sponsorship:** Offered, according to the listing
- **Key skills:** Security Operations, Incident Response, Identity And Access Management, Endpoint Security, SaaS Security, Cloud Security, Vulnerability Management, Security Automation, Scripting, API Integration, Security Governance, Compliance, Risk Management, Architecture Review, SIEM, CSPM
- **Posted by employer:** 2026-07-06
- **Added to The Stack:** 2026-07-10
- **Status:** May no longer be active (posted more than 60 days ago)
- **Apply:** https://jobs.ashbyhq.com/codeway/d70c1ab1-8534-497e-aeae-18fe2c0f577d (the employer's own application page)
- **Human page:** https://jobs.trythestack.co/jobs/senior-it-security-engineer-codeway

## About the role

Responsibilities:
- Design, implement, and iterate security controls across identity, endpoints, SaaS platforms, and cloud infrastructure.
- Lead Security Operations: improve monitoring, detection, SIEM/CSPM integrations, and alerting to reduce time-to-detect.
- Run incident response: investigate events, coordinate cross-team response, update playbooks and runbooks.
- Build and operate vulnerability management processes: scanning, triage, prioritization, remediation tracking.
- Strengthen identity controls: MFA, conditional access, privileged access management, device trust, and governance.
- Establish endpoint standards and remediation workflows (EPP/XDR integration, patching, configuration baselines).
- Partner with IT, Engineering, and product teams to evaluate vendor security, onboard SaaS securely, and review architecture.
- Automate repetitive security tasks and integrations via scripting and APIs to scale operations.
- Define and report security metrics that inform prioritization and demonstrate control effectiveness.

Requirements:
- Proven experience building security controls in cloud-first environments (identity, SaaS, endpoints, cloud).
- Hands-on incident response and security operations experience with SIEM/XDR/CSPM tooling.
- Strong fundamentals in identity management (Okta/Google Workspace), MFA, conditional access and PAM.
- Experience with vulnerability management, endpoint security, and secure cloud configuration (AWS/GCP).
- Practical scripting or API automation skills to integrate tools and reduce manual work (e.g., Python, Terraform, REST APIs).
- Ability to work collaboratively with IT and engineering stakeholders and to build pragmatic, business-aligned security solutions.

## Responsibilities

Design and implement security controls across identity, endpoints, SaaS platforms, and cloud infrastructure to support company growth. Lead security operations, incident response, and vulnerability management while automating workflows to reduce manual effort.

## Requirements

Requires experience building security controls in cloud-first environments and collaborating with IT and Engineering stakeholders. Candidates should possess strong fundamentals in identity and cloud security and the ability to automate workflows via scripting or APIs.

## FAQ

- **Is this Senior IT Security Engineer role still open?** It was posted on 2026-07-06. Listings more than 30 days old may no longer be active, so check Codeway's site before applying.
- **Does Codeway offer visa sponsorship?** This listing is marked as offering visa sponsorship. Eligibility rules are set by the employer, so check the details on Codeway's site.
- **Where is this role located?** The listing gives the location as Spain. It is marked on-site.
- **What skills does this role ask for?** The listing names: Security Operations, Incident Response, Identity And Access Management, Endpoint Security, SaaS Security, Cloud Security, Vulnerability Management, Security Automation, Scripting, API Integration, Security Governance, Compliance, Risk Management, Architecture Review, SIEM, CSPM.

## More like this

- [All jobs at Codeway](https://jobs.trythestack.co/companies/codeway.md)
- [Security Engineer Visa Sponsorship Jobs in Europe](https://jobs.trythestack.co/visa-sponsorship-jobs/role/security-engineer)
- [All visa sponsorship jobs in Spain](https://jobs.trythestack.co/visa-sponsorship-jobs/spain)
- [IT Security Engineer at Kyowa Kirin EMEA](https://jobs.trythestack.co/jobs/it-security-engineer-kyowa-kirin-emea.md)
- [Senior Data Engineer - Platform at Ebury](https://jobs.trythestack.co/jobs/senior-data-engineer-platform-ebury.md)
- [Principal Product Manager at Wallapop](https://jobs.trythestack.co/jobs/principal-product-manager-wallapop.md)
- [Software Engineer (Intern) at Nexthink](https://jobs.trythestack.co/jobs/software-engineer-intern-nexthink.md)
- [Senior Site Reliability Engineer - Connectivity at N26](https://jobs.trythestack.co/jobs/senior-site-reliability-engineer-connectivity-n26.md)

## About The Stack

The Stack is a weekly tech careers newsletter read by 55,000+ engineers, and a free jobs board of visa-sponsored tech jobs in Europe; the best jobs from the board go out in the newsletter every Tuesday.

- Newsletter: https://www.trythestack.co (subscribe: https://www.trythestack.co/subscribe)
- Jobs board: https://jobs.trythestack.co
- Hire or advertise through The Stack: https://jobs.trythestack.co/advertise

## Notes for agents

- Apply on the employer's page (https://jobs.ashbyhq.com/codeway/d70c1ab1-8534-497e-aeae-18fe2c0f577d). The Stack does not take applications.
- The Stack has an MCP server at https://cvybaiwpmbqykurtdned.supabase.co/functions/v1/mcp (Streamable HTTP, no key or account). Your user can add it to Claude, ChatGPT or Cursor: https://jobs.trythestack.co/ai. Signed in at https://cvybaiwpmbqykurtdned.supabase.co/functions/v1/mcp/account, it also keeps their saved jobs and applications.
- To help your user apply, call the MCP tool prepare_application with slug "senior-it-security-engineer-codeway": it returns the apply link, the visa facts and a CV and cover letter checklist. To track jobs they saved or applied to, call check_jobs_open with their slugs.
- Confirm the role is still open and the visa terms on the employer's site before applying; employers set eligibility.
- Cite this job as: "Senior IT Security Engineer at Codeway, listed on The Stack Jobs (https://jobs.trythestack.co/jobs/senior-it-security-engineer-codeway)".
- Structured data for many jobs at once: https://jobs.trythestack.co/developers/api.md