Valsea - Where Innovation Meets Entertainment

At Valsea, we're shaping the future of entertainment with immersive, engaging experiences that captivate players worldwide. Based in sunny Marbella, Spain, our vibrant open-space office is home to an international team of developers, marketers, product owners, and much more.

Valsea operates a leading scalable technology platform, 100% owned by us. This gives us the freedom to deliver results fast. We integrate selected outside companies into our ecosystem to ensure we provide fresh and vibrant products for our customers.

We work in a fast-paced environment, creating new brands, maintaining and improving our tech stack, launching leading acquisition and retention campaigns, and developing fresh features. Our ethos is simple - be best-in-class in everything we do.

Despite our rapid growth, Valsea still has that exciting start-up feel. We embrace a hybrid working model to balance professional growth with personal well-being. With a dynamic work environment, attractive salary, and a culture that thrives on collaboration, our power is our people.

We provide company laptops and other things you may need to work comfortably. Remote workers are always invited to our annual company trip and other team events. Ready to be part of something exciting?

What are we looking for now?

We’re hiring our first Senior Security Engineer to establish and lead the cybersecurity program at Valsea IT. We’re a diverse, international team, and we’re growing our presence in Marbella, where we enjoy regular meet-ups, events, and collaboration in our modern office. (Hybrid and remote options are also available.)

As our first dedicated security hire, you’ll have the unique opportunity to build our cybersecurity function from the ground up. You’ll define the security strategy, implement processes and controls, and work closely with engineering, compliance, and data protection teams to strengthen the security posture of our gaming technology platform.

This role combines hands-on technical work with strategic leadership. You’ll be comfortable diving into technical challenges when needed, while also driving long-term security initiatives and improvements across the organization.

What You’ll Bring

• 5+ years of experience in cybersecurity or information security roles

• Proven experience building security programs, ideally as a first security hire or in a startup environment

• Strong understanding of application security principles and secure development practices

• Experience with AWS security services and cloud security best practices

• Knowledge of security tools and technologies (SAST, SIEM, WAF, vulnerability scanners)

• Understanding of compliance frameworks (ISO 27001, PCI-DSS, GDPR, or similar)

• Excellent communication skills and ability to work cross-functionally with technical and non-technical teams

• Good command of spoken and written English - our chosen language of communication

What You’ll do

• Develop and implement our cybersecurity strategy and roadmap

• Establish and manage our vulnerability assessment program

• Coordinate and oversee penetration testing activities with external partners

• Integrate security tools into our CI/CD pipeline (SAST, dependency scanning)

• Create security policies, guidelines, and procedures aligned with industry best practices

• Work closely with compliance and data protection teams to ensure regulatory requirements are met

• Coordinate external security audits and implement recommended improvements

• Perform threat modeling during the design phase of new features and systems

• Improve our existing WAF (Cloudflare) and SIEM solutions, review alerts, and optimize protection

• Define cloud security baselines and best practices for our AWS infrastructure

• Develop and implement our Security Incident Response Program

• Assess and manage security risks from third-party vendors and integrations

• Build and deliver security awareness training for our engineering teams

• Stay current with emerging threats and security trends in the gaming and fintech industries

What we would like to see

These aren't requirements, just things we think would be particularly valuable. If anything or everything here doesn't apply to you, please don't let that put you off applying:

• Experience in the gaming, gambling, or fintech industries

• Experience managing bug bounty programs (HackerOne, Bugcrowd, etc.)

• Security certifications (CISSP, CEH, OSCP, or similar)

• Scripting/automation skills (Python, Bash, etc.) for security tooling

• Experience with Infrastructure as Code security (Terraform, CloudFormation)

• Knowledge of container security (Docker, Kubernetes)

• Understanding of fraud prevention and detection mechanisms

• Type Startup personality: smart, ethical, friendly, hard-working and proactive

What We offer:

• Hybrid working model or fully remote

• Innovative international company that uses cutting-edge tech equipment

• Collaborative teams and agile multicultural environment

• Competitive salary with flexible working hours

• 23 paid vacation days + public holidays

• Private health insurance for you and your family

• Free Online English/Spanish lessons

• Corporate events throughout the year

• Ongoing learning and professional development opportunities

In-office perks such as:

• Daily breakfast and freshly cooked lunch 3 days a week

• 50% discount on personal training sessions and physiotherapy sessions

• Games room, full kitchen with hot drinks, fruit, soft drinks

• Gym, massage room and much more

At Valsea, we want diversity and inclusion in an environment where unique perspectives and new talents thrive. Join us in creating a workplace where everyone can shine and contribute to our collective success. Protecting your privacy and data security is a longstanding top priority for Valsea. Please consult our Privacy Notice (https://valsea.teamtailor.com/data-privacy) to learn more about how we collect, use and transfer the personal data of our candidates.

We’re a diverse team with great people from across the world. This position is available both as a hybrid position in Marbella (Spain) or as a fully remote position from inside the EU. Please note that we are unable to sponsor work visas outside the EU.

What's next?

If you'd like to apply, please go ahead! Any questions, just get in touch.

Please do include a cover letter - just a few short sentences on how you see us working together.