Senior Security Application Engineer Lisboa

Intro

At Pleo, we’re on a mission to revolutionise the way businesses manage company spending. No more outdated processes, clunky spreadsheets, or frustrating delays – we believe spend management should be seamless, empowering, and surprisingly effective for finance teams and employees alike. We’re creating tools that promote autonomy, foster trust, and let businesses focus on what truly matters.

Our culture is built on transparency, collaboration, and a deep commitment to innovation – which is reflected in our spending solution. At Pleo, you’ll join a passionate team shaping the future of work, all while having some fun along the way.

About the role

We're looking for a Senior Application Security Engineer to join our Security team at Pleo. In this role, you'll help shape the future of application security at Pleo and be part of the wider effort to protect our customers’ money and data as we scale. If you're excited about applying security in pragmatic, scalable ways – and are passionate about building resilient financial products – then this is the opportunity for you!

What you’ll be doing

• Partner with engineering teams to design and review secure technical solutions
• Dive deep into authentication, encryption, and partner integration security topics
• Help triage and resolve issues identified through our bug bounty program
• Guide developers on secure coding practices and help fix identified vulnerabilities
• Support GRC and Dev
  Ops teams with automation and security controls in our CI/CD pipelines
• Help plan, prioritise, and own the Application Security roadmap
• Drive
  - term security initiatives that balance automation, compliance, and access needs

What you bring

• Strong communication skills and a pragmatic approach to security
• Experience working closely with developers and product teams
• Proficiency in at least one server‑side language – we mainly use Kotlin and Type
  Script
• Expertise in code review and dynamic testing to identify security flaws
• A deep understanding of security libraries, controls, and common vulnerabilities
• Subject matter expertise in at least one technical area of application security
• A passion for learning and solving unfamiliar or complex problems creatively
• The ability to approach problems with honesty, curiosity, and clarity

Experience with the following is a bonus

• Java or Kotlin proficiency, particularly with securing JVM‑based applications
• Knowledge of PCI DSS, GDPR, or PSD2 and how they apply to application security
• Supporting compliance efforts such as audits, segmentation, or access controls

Who you’ll be working with and reporting to

You’ll report to our Head of Security Engineering and work closely with teams in Engineering, Dev
Ops, GRC, and Product. Our team of specialists is highly collaborative and dedicated to enabling secure growth at scale. You’ll also have the chance to work cross‑functionally across Pleo to strengthen our security posture in line with company goals.

How you’ll develop in this role

• Lead and refine our Application Security roadmap
• Drive improvements in secure development practices across engineering teams
• Shape and execute long‑term security initiatives that support scalable product growth

Show me the benefits!

• Your own Pleo card (no more out‑of‑pocket spending!)
• Lunch is on us for your work days – enjoy catered meals or receive a lunch allowance based on your local office
• Comprehensive private healthcare – depending on your location, coverage options include Vitality, Alan or Médis
• We offer 25 days of holiday + your public holidays
• For our team, we offer both hybrid and fully remote working options
• Option to purchase 5 additional days of holiday through a salary sacrifice
• We use Mynd
  Up to give our employees access to free mental health and well‑being support with great success so far
• Paid parental leave – we want to make sure that we’re supportive of families and help you feel that you don’t have to compromise your family due to work

Please note: We are unable to offer visa sponsorship for this role in any of the listed locations.

Why join us?

Working at Pleo means you're working on something very exciting: the future of work. Our mission is to help every company go beyond the books. Pleo itself means ‘more than you’d expect’, and it’s been the secret to our success over the last 8 years. So it’s only fitting that we’d pass this philosophy onto our customers to help them make the most of their finances.

We think company spending should be delegated to all employees and teams, that it should be as automated as possible, and that it should drive a culture of responsible spending. Finance teams shouldn’t be siloed from the rest of the organisation – they should work in unity with marketing, sales, IT and everyone else.

Our values tell the story of how we work at Pleo. We have four core values: 1) champion the customer – addressing real pain points that businesses face; 2) succeed as a team – highlighting how our strength lies in our diversity and trust in each other; 3) make it happen – taking bold decisions and following through to deliver results; 4) build to scale – creating lasting solutions that address today’s challenges and anticipate tomorrow’s needs.

Today we are a 850+ team, from over 100 nations, with offices in Copenhagen, London, Stockholm, Berlin, Madrid, Montreal and Lisbon – and quite a few full‑time remotes in 35 other countries. Being headquarters in Copenhagen means we're inspired by a good work‑life balance. If you don't work in the office with us, we'll help you set up the best remote setup possible and make sure you still have time to connect with your team.

About Your Application

• Please submit your application in English; it’s our company language so you’ll be speaking lots of it if you join.
• We treat all candidates equally: If you are interested please apply through our application system – any correspondence should come from there! Our support team cannot handle calls or emails directly, ensuring a fair process.
• We’re on a mission to make everyone feel valued at work. That’s only achievable if our team reflects the diversity of the world around us – and that starts with you, hitting apply, even if you are worried you might not tick all the boxes! We embrace and encourage people from all backgrounds to apply – regardless of race, ethnicity, colour, religion, nationality, gender, sex, sexual orientation, age, marital status, disability, neurodiversity, socio‑economic status, culture or beliefs.
• When you submit an application we process your personal data as a data processor. Find out more about how your data is used in the FAQs section at the bottom of our jobs page.