
Sr. Application Security Engineer
- šŖšø Spain
- Hybrid
- Senior
- 12 hours ago
- React Native
- Ruby
- AWS
- Threat Modeling
- CI/CD
- SAST
- triage
- GDPR
- Incident Response
- OWASP
- JavaScript
- TypeScript
- iOS
- Android
- IAM
- OSCP
- OSWE
- GWAPT
- Health insurance
- Equity
We've set the standard in kids entertainment. Come help us raise it.
We're Lingokids, the #1 entertainment platform for young kids. Most kids content is designed to capture attention. We create experiences little ones genuinely love.
Everything we make is created in-house to be seriously fun, with the good stuff built in from the very beginning. We're KidSAFE certified, completely ad-free, and committed to giving families entertainment they can trust, with no compromise. Ever.
20 million kids come back to us every single month, and weāve earned more than 50 awards along the way. Now we're going after something bigger: becoming the go-to entertainment destination for kids everywhere, and changing what content looks like for the generation growing up on it.
You in? Keep on reading.
The role
We're hiring aSenior Application Security Engineer to own the security of the Lingokids apps and the systems behind them. Millions of families trust us with their kids' time, and keeping that trust is part of the product. You'll work inside our engineering teams, making the secure path the easy path, not acting as a gate at the end.
What youāll do
Own application security across our React Native app, Ruby backend services and APIs, and AWS infrastructure.
Run threat modeling and design reviews with squads on new features and architecture changes.
Build and maintain security tooling in CI/CD: SAST, dependency scanning, secrets detection, mobile app analysis.
Strengthen our software supply chain: third-party SDKs, open-source dependencies, build pipeline integrity.
Find, triage and fix vulnerabilities, hands-on in the code when needed.
Run or coordinate penetration tests and turn findings into fixes.
Work with Legal and Privacy so our apps meet kids privacy requirements (COPPA, GDPR) in practice, not just on paper.
Raise the security baseline of the engineering team through guidelines, reviews and practical training.
Take part in security incident response.
What youāll bring
5+ years in security engineering, with a strong focus on application security in a product company.
Hands-on mobile application security experience, ideally with React Native, and familiarity with OWASP MASVS / ASVS.
Ability to read, review and write code; Ruby and/or JavaScript / TypeScript preferred.
Experience integrating security tooling into CI/CD pipelines.
Solid understanding of web and API security, authentication and authorization.
Judgment to prioritize real risk over theoretical findings, and the communication skills to get engineers on board.
Nice to have
Native iOS and/or Android security experience.
AWS security experience (IAM, network controls, security services).
Experience with privacy regulation affecting kids products (COPPA, GDPR-K, KidSAFE).
Software supply chain security (SBOM, dependency pinning, signed builds).
Certifications such as OSCP, OSWE or GWAPT.
English is a must
We're a multicultural team building in English, so while certifications aren't necessary, fluency is. And since we're fully remote, clear communication matters as much in writing as in speaking, especially in the long-form, async formats that keep a distributed team working well together.
Life at Lingokids
šĀ Career Growth: Your growth drives our success! We invest in your development up toā¬2,000 per year for books and training; so you can keep learning and growing with us.
š” Remote in Spain & Relocation-Friendly Work from wherever youāre most productive, whether thatās your home anywhere inSpain or our vibrant hub inMadrid. Not currently in Spain? Weād love to have you here! We actively encouragerelocation for those looking to make Spain their new home base.
š Stock Options: Your contribution matters! You'll receivestock options, giving you the opportunity to own part of the company and share in its success.
š„Ā Home Office Setup: Create your ideal workspace with aā¬400 allowance for setup andā¬35/month for remote work expenses, because comfort fuels creativity!
š²Ā Meal Allowances: Getā¬60/month on your Cobee card to enjoy meals at restaurants or food delivery, good food makes everything better!
š³Ā Flexible Compensation: Manage yourmeal, transport and childcare expenses easily withCobee, integrating them directly into your payroll.
Ā š©ŗĀ Health Insurance: Accessprivate health coverage at exclusive rates through Adeslas, seamlessly deducted from your payroll, quality care made simple.
š¬Ā Language Lessons: Learning never stops! Enjoyfree language classes in Spanish and English, to sharpen your skills and stay connected in a global team.
šĀ Visa Sponsorship: If you need avisa to work in the EU, weāll handle the process and cover the costs to make your transition seamless.
š Company events: Yes! Weāre a fully remote team spread across different countries, but we love getting together from time to time in different corners of Spain, for team gatherings and recharging at our amazing off-sites!
Passion matters more than perfection
Didnāt check every box for this role? No worries! Weāre looking for passionate, driven individuals who believe in our mission. If that sounds like you, weād still love to hear from you!
Diversity, Equity, and Inclusion
At Lingokids, diversity isnāt just a checkboxāitās at the heart of everything we do. Just like we teach kids to embrace differences, we celebrate them in our team, knowing that the best ideas come from unique perspectives. Weāre all about creating a space where everyone feels valued, heard, and empowered to be their authentic selves. No matter your background, identity, or story, if youāre passionate about making a difference in education, we want you here.
Sr. Application Security Engineer Ā· Lingokids