Software Product Security Engineer

SOFTWARE PRODUCT SECURITY ENGINEER - Cybersecurity (ODS)

Open Digital Services is the software development company of Santander Group powering the next generation of banks by creating innovative banking products and implementing them in collaboration with Santander Group Affiliates. 

Santander Group is one of the world's largest financial institutions and the Eurozone's leader, we're committed to being the best Digital Bank with Branches in the industry.     

Our mission at ODS is to design and support an advanced digital and omnichannel platform, ensuring the best customer experience using cutting-edge technology. Openbank, our flagship partner, is where we develop our most advanced concepts first. Be part of our Best-in-Class  team and help us create unique value for our customers!  

Join us to tackle exciting tech challenges in an agile environment, benefiting from learning, growth, and local and international career opportunities in a modern, diverse setting.

Mission and responsibilities:

The Software Security Engineer mission is to ensure that our Software products are secure from threats and vulnerabilities throughout their lifecycle. This involves identifying potential risks, designing and implementing security measures, and developing strategies aligned with the Global Cyber policies and market best practices to mitigate these risks having into account different areas such as application security, data security, cloud security, customer journeys, cyber operational readiness, fraud and third-party products and vendors that might be part of the platform.

The main tasks of this position will be the following:

Risk Identification & Mitigation

• Identify potential risks within existing and new software developments.
• Define strategies to mitigate security risks effectively finetuning the existing SW controls or designing new ones.
• Conduct threat modeling, analyzing customer journeys, cyber operational readiness, and fraud risks.

Security Design & Implementation

• Translate user stories into detailed technical requirements, ensuring alignment with cybersecurity principles and systems architecture.
• Ensure the efficiency and effectiveness of implemented controls.

Collaboration & Cross-Team Support

• Syndicate the detailed implementations with the Global Cyber Corporate Teams to align the results with Global policies and standards.
• Collaborate closely with other CISO areas and development teams.
• Work with development squads to manage impacts, dependencies, and documentation of technical requirements.

Testing & Quality Assurance

• Support the development and execution of acceptance tests, ensuring all criteria are met.
• Coordinate all test activities and ensure that each story meets acceptance criteria.

Delivery & Progress Tracking

• Analyze and report delivery progress, risks, and opportunities.
• Approve final release plans in collaboration with the Release Manager, ensuring priorities and dependencies are well-managed.

To be successful in the role you must have

• Deep knowledge about Secure SW Development techniques for both mobile and web apps environments.
• Studies related with Computer Science, Telecommunications Engineering or similar.
• At least 10 years of experience in the cybersecurity field.
• Technical Expertise: Strong knowledge of application security and software development, data security, cloud security, and threat modeling.
• Problem-Solving: Ability to identify, analyze, and mitigate risks in software products.
• Collaboration: Experience working with cross-functional teams, including development squads and product owners.
• Analytical Skills: Capacity to manage technical dependencies and track progress across multiple projects.
• Testing Knowledge: Familiarity with designing and implementing acceptance tests.
• Deep experience in the tasks previously mentioned.
• Advanced level of English. Spanish is a plus.
• Experience working with cloud environments

What do we offer?

• Joining a dynamic and agile company undergoing international expansion.
• Working in start-up mode with the support of the Santander Group.
• Competitive remuneration and attractive benefits package.
• Possibility of growth within the company and the Group.
• Collaborating on international projects in different countries.
• Excellent work environment, social clubs, and frequent events (virtual at present).

Would you like to grow with us? Join our team!

ODS is an equal opportunity employer. All applicants will be considered as equal without paying attention to gender identity, sexual orientation, ethnicity, religion, age, political orientation, union membership nor disability status.

We make recruiting decisions based on your experience and skills. We value your passion to discover, invent, simplify, and build.

The personal data you provide as well as any data generated during the selection process are confidential and will be processed by Open Bank, S.A./ Open Digital Services, S.L. with registered office at Plaza de Santa Bárbara 2, 28004 (Madrid), for the sole purpose of managing your participation in the selection processes and, where appropriate, to formalise your recruitment.  

For further information about your rights and data protection, please read the ODS/Openbank Privacy Policy applicable to this type of data processing here. 

OBTECH22