Sr. Application Security Engineer at Lingokids

About the role

Responsibilities:
- Own application security for React Native apps, Ruby backend services/APIs and AWS infrastructure.
- Lead threat modelling and design reviews for new features and architecture changes.
- Build and maintain CI/CD security tooling: SAST, dependency scanning, secrets detection, mobile app analysis.
- Harden the software supply chain: review third‑party SDKs, manage open‑source dependencies, and ensure build integrity.
- Triage, remediate and, when needed, fix vulnerabilities directly in codebases.
- Coordinate or run penetration tests and convert findings into repeatable fixes.
- Partner with Legal & Privacy to implement COPPA/GDPR requirements in production.
- Raise engineering security baseline via guidelines, practical training and code reviews.
- Participate in security incident response and post‑incident remediation.

Requirements:
- 5+ years in security engineering with a strong focus on application security in product environments.
- Hands‑on mobile app security experience (ideally React Native); familiarity with OWASP MASVS/ASVS.
- Ability to read, review and write code (Ruby and/or JavaScript/TypeScript preferred).
- Experience integrating security tooling into CI/CD pipelines and automating checks.
- Solid knowledge of web/API security, authentication/authorization and risk prioritisation.
- Strong communication skills to influence engineers and product teams.
- Nice to have: native iOS/Android security, AWS security (IAM, network controls), SBOM/supply‑chain practices, and relevant certifications (OSCP/OSWE/GWAPT).

Responsibilities

You will own the application security for Lingokids apps, backend services, and AWS infrastructure. This includes running threat modeling, managing security tooling in CI/CD pipelines, and ensuring compliance with privacy regulations like COPPA and GDPR.

Requirements

The role requires 5+ years of experience in security engineering with a strong focus on application security and mobile platforms. Candidates should be proficient in reading and writing code, specifically Ruby or JavaScript/TypeScript, and have experience with security tooling integration.

Key skills

• Application security — in 25 other listings on The Stack
• React Native — in 32 other listings on The Stack
• Ruby — in 10 other listings on The Stack
• AWS — in 738 other listings on The Stack
• CI/CD — in 592 other listings on The Stack
• Threat modeling — in 30 other listings on The Stack
• SAST — in 9 other listings on The Stack
• Dependency scanning — not in any other listing on The Stack
• Secrets detection
• Mobile app analysis
• Software supply chain security
• Penetration testing
• COPPA
• GDPR
• API security
• Authentication

On The Stack (as of 2026-10-22)

• Lingokids has 8 other listings on The Stack, 8 of them marked as offering visa sponsorship.
• 70 visa-sponsored jobs in Spain on The Stack, posted in the last 60 days.
• 36 visa-sponsored security engineer jobs in Europe on The Stack, posted in the last 60 days.

Frequently asked questions about Lingokids

Is this Sr. Application Security Engineer role still open?

It was posted on 2026-10-21 and is listed as active on The Stack. Confirm on Lingokids's application page before applying.

Does Lingokids offer visa sponsorship?

This listing is marked as offering visa sponsorship. Eligibility rules are set by the employer, so check the details on Lingokids's site.

Where is this role located?

The listing gives the location as Spain. It is marked on-site.

What skills does this role ask for?

The listing names: Application security, React Native, Ruby, AWS, CI/CD, Threat modeling, SAST, Dependency scanning, Secrets detection, Mobile app analysis, Software supply chain security, Penetration testing, COPPA, GDPR, API security, Authentication.