Job Overview
Location
España
Job Type
Full-time
Category
Software Engineering
Date Posted
December 5, 2025
Full Job Description
📋 Description
- • Own the security posture of a platform trusted by millions of teachers and students worldwide. As Edpuzzle’s next Security Engineer you will design, build and continuously improve the safeguards that protect our data, our product and the trust our global community places in us every day.
- • Architect and implement security controls across AWS-hosted micro-services, Kubernetes clusters and CI/CD pipelines. You will write infrastructure-as-code (Terraform, CloudFormation) that bakes security in from day one, automate vulnerability scanning in every pull request and ensure secrets management, IAM policies and network segmentation follow the principle of least privilege.
- • Lead threat-modeling sessions with feature squads before a single line of code is shipped. Translate complex security concepts into clear, actionable guidance for JavaScript/TypeScript engineers so that new functionality launches with OWASP Top 10 protections, secure defaults and privacy-by-design baked in.
- • Run red-team-style exercises and purple-team drills, then turn findings into measurable OKRs. You will coordinate penetration tests, bug-bounty triage and internal red-team engagements, prioritize findings by business risk and shepherd fixes through to production while tracking remediation SLAs.
- • Build security tooling that scales with Edpuzzle’s growth. From custom Lambda functions that detect anomalous S3 access to Slack bots that surface suspicious login patterns, you will automate repetitive tasks, enrich alerts with context and free the team to focus on higher-order problems.
- • Own incident response end-to-end. When an alert fires you will jump on the bridge call, coordinate containment, forensics and communication with legal, PR and customer-success teams, then lead a blameless post-mortem that feeds straight back into stronger controls.
- • Drive compliance initiatives that turn frameworks like SOC 2, ISO 27001 and GDPR into living, breathing processes. You will map controls to code, evidence collection to automation and audit fatigue to a thing of the past.
- • Champion a culture of security across the company. You will create bite-sized training modules, lunch-and-learns and phishing simulations that make security feel relevant and fun for engineers, teachers and support staff alike.
- • Evaluate third-party vendors and integrations for security risk. You will build lightweight but rigorous assessment playbooks, review SOC reports and pentest summaries and negotiate security addenda that protect Edpuzzle data wherever it flows.
- • Stay ahead of the curve. You will monitor emerging threats (supply-chain attacks, novel cloud misconfigurations, AI-generated phishing) and translate them into proactive defenses, ensuring Edpuzzle remains a trusted, resilient learning platform for the next decade.
🎯 Requirements
- • 2–3 years of combined experience as a Software, DevOps or Site Reliability Engineer with demonstrable security ownership (code reviews, threat modeling, incident response).
- • Strong programming skills in JavaScript/TypeScript or Node.js and familiarity with securing modern web applications against OWASP Top 10 vulnerabilities.
- • Hands-on experience with AWS security services (IAM, GuardDuty, Security Hub, KMS, Secrets Manager) and infrastructure-as-code tools.
- • Working knowledge of at least one major security or privacy framework (NIST, ISO 27001, SOC 2, GDPR).
- • Bachelor’s or Master’s degree in Computer Science, Computer Engineering or related field (or equivalent practical experience).
- • Current residence in Spain with valid work authorization.
🏖️ Benefits
- • Competitive salary of €40 000 – €48 000 based on experience.
- • Remote-first culture within Spain plus optional access to our Barcelona office, stocked pantry and high-speed Wi-Fi.
- • 24 paid vacation days plus December 24th and 31st off, flexible working hours and reduced Fridays for true work-life harmony.
- • Comprehensive perks: Wellhub gym membership, €2 000 annual meal allowance via Cobee, private AXA health insurance, flexible remuneration for childcare, public transport and family health coverage.
Skills & Technologies
JavaScript
TypeScript
Node.js
AWS
Remote
Degree Required
About EDpuzzle, Inc.
Edpuzzle provides an interactive video platform that lets K-12 teachers crop, add voiceovers, and embed quizzes into existing videos from YouTube, Khan Academy, and other sources. The software tracks student engagement and comprehension in real time, integrates with Google Classroom and Canvas, and offers analytics for formative assessment. Founded in 2013, the company serves 1.5 million teachers and 25 million students worldwide, offering a free tier and paid school-wide licenses.
