security engineer

Mews provides a platform that helps hotels run more efficiently and create better guest experiences.

• Build and maintain application security tooling, including SAST and SCA, integrated into engineering workflows
• Run threat modeling sessions with product and platform teams to identify potential attacks before code is written
• Own and improve Azure cloud security controls, including policy-as-code enforcement and secure-by-default configuration standards
• Contribute to supply chain security by reducing risks from third-party dependencies and delivery pipelines
• Use AI tools to accelerate threat modeling, triage vulnerability findings, and build repeatable security review workflows
• Evaluate AI-generated code for vulnerabilities, surface threat patterns across large codebases, and verify AI-generated outputs

• 2–5 Years of hands-on security engineering experience in a software company or cloud-native environment, building security capabilities rather than operating existing tooling
• Practical application security experience with SAST, SCA, secret scanning, or container security using modern tools such as Wiz, Snyk, Semgrep, or similar
• Cloud security experience with Azure, AWS, or GCP; Azure is preferred
• Development or scripting experience with Python, .NET, or similar, enabling code review, security analysis, and automation
• AI Fluency Level 3 or equivalent hands-on experience redesigning security workflows with AI, building repeatable processes for others, and verifying AI outputs
• Будет плюсом: familiarity with STRIDE or PASTA, supply chain security controls such as SBOM generation, dependency pinning, or pipeline integrity verification, technical exposure to European cybersecurity compliance frameworks

• Salary ranges: €57.000 — €70.000 EUR in Spain; 1 191 500 Kč — 1 598 000 Kč CZK in Czechia
• Unlimited paid holiday, company share program, paid parental leave, annual learning budget of €300 (and more for high performers), monthly EDGE time, home office setup budget, monthly work-from-home allowance, and Claude tokens
• Flexible, hybrid working options and a work-from-anywhere policy allowing work abroad for a few weeks each year
• Relocation options available after one year
• Local benefits vary by location and may include healthcare, retirement plans, team events, socials, and other perks