Security EngineerMews · Czechia; Spain

Security Engineer

🗓️ Posted 2026-10-07 Czechia; Spain Hybrid ICT
💰 Salary Not shared 📊 Market 4,800 GBP–25,000 GBP/mo

About the Company

The hospitality industry is uniquely human, and it deserves technology that's just as inspiring as the people behind it. At Mews, we're transforming the industry with a platform that helps hotels run smarter, move faster and create better guest experiences. You'll work with smart, curious people who care deeply about what they do. You'll have autonomy and the trust to make good decisions and move quickly. And you'll enjoy a real sense of purpose as you see the impact of what we're building.

About the Role

Security is load-bearing infrastructure at Mews. Every payment processed, every guest record stored, every API call made by an integration partner runs through systems this team is responsible for keeping secure. As the Security Engineer joining the Security Engineering team, you will own the tooling and controls that let hundreds of engineers build fast without creating risk they cannot see. This is a building role, not a monitoring role: you will design and implement security capabilities, embed checks into the pipelines that engineers use every day, and work directly with product and platform teams to make secure choices the easy ones. The team is at a high-watermark moment for delivery. A recent promotion to Staff Engineer is great news for Mews, but it has shifted roughly half that person's capacity to a major compliance initiative, leaving a real gap in the security engineering roadmap. Supply chain security, cloud policy enforcement, and application security tooling all have concrete 2026 milestones attached. This hire closes that gap and has an immediate, visible impact on what the team ships.

Responsibilities

  • ● Build and maintain application security tooling integrated directly into the engineering workflow
  • ● Run threat modeling sessions with product and platform teams, helping them identify how their systems could be attacked before code is written, not after
  • ● Own and improve cloud security controls on Azure, including policy-as-code enforcement and secure-by-default configuration standards
  • ● Contribute to supply chain security, making sure the third-party dependencies and delivery pipelines Mews relies on are not introducing risk into the platform
  • ● Use AI tooling to accelerate threat modeling analysis, triage vulnerability findings at scale, and build repeatable security review workflows that the broader engineering team can run without a security specialist in the room for every review

Application Notes

If you're motivated by ownership, curiosity and meaningful impact, and are driven to deliver consistent high performance, you'll feel at home here.