security engineer in edtech

Preply creates personalized language-learning experiences by connecting learners with tutors worldwide. The company combines human-led teaching with technology and AI to support learners across more than 180 countries.

• Own platform security across AWS, Kubernetes, and GCP, focusing on detection, alerting, and incident response readiness;
• Lead platform security initiatives end-to-end, from problem definition through rollout and iteration;
• Define how platform security is designed, implemented, and operated;
• Evolve monitoring into an effective and actionable detection and response capability;
• Work hands-on with Datadog, Okta, and SaaS platforms;
• Drive cross-functional security initiatives with SRE, Data, Engineering, and GRC;
• Strengthen cloud and platform security through guardrails, secure patterns, and automation;
• Improve access security for internal infrastructure, including identity, privileged access, and auditability;
• Improve Kubernetes deployment security, including cluster and workload security, policy enforcement, and workload identity;
• Mature detection and response capabilities using Datadog;
• Improve log coverage and data quality across cloud, Kubernetes, CI/CD, identity, and SaaS;
• Build and tune actionable detections with clear severity, ownership, and expected frequency;
• Reduce alert noise through correlation, deduplication, enrichment, and continuous tuning;
• Establish triage workflows and escalation paths while participating in Security on-call rotations;
• Create investigation playbooks and runbooks;
• Partner with Data teams to improve monitoring for suspicious activity and sensitive access patterns;
• Improve secrets management and reduce exposure risk across CI/CD and runtime;
• Build security automation that makes secure practices easier for engineers.

• Strong experience securing cloud and platform environments, especially AWS and Kubernetes;
• Ability to extend cloud security practices into GCP;
• Hands-on experience delivering technical security initiatives end-to-end in production;
• Strong understanding of the software development lifecycle;
• Experience with CI/CD and infrastructure as code;
• Practical experience improving identity and access security;
• Strong familiarity with Okta event monitoring and identity-focused detection patterns;
• Experience building or maturing security operations capabilities, including triage, runbooks, tuning, and measurable improvement;
• Experience improving logging coverage and signal quality;
• Experience building actionable detections;
• Strong collaboration and influence skills across SRE, Data, Engineering, and GRC;
• Business-oriented mindset and comfort making cost-benefit tradeoffs;
• Strong communication skills;
• Minimum C1 English level;
• Willingness to participate in on-call rotations and partner with SRE during incidents;
• Nice to have: Terraform and infrastructure as code at scale, Jenkins hardening and CI/CD supply chain security controls, Cloudflare security controls, scripting or programming for automation and tooling, incident response in cloud-native environments.

• Paid relocation to London or Barcelona;
• A generous monthly allowance for lessons on Preply.com;
• Learning & Development budget;
• Time off for self-development;
• Competitive financial package with equity and leave allowance;
• The opportunity to support learners and tutors through language learning and teaching in 175 countries.