Senior Security Application Engineer

Intro

At Pleo, we’re on a mission to revolutionise the way businesses manage company spending. No more outdated processes, clunky spreadsheets, or frustrating delays – we believe spend management should be seamless, empowering, and surprisingly effective for finance teams and employees alike. We’re creating tools that promote autonomy, foster trust, and let businesses focus on what truly matters.

Our culture is built on transparency, collaboration, and a deep commitment to innovation – which is reflected in our spending solution. At Pleo, you’ll join a passionate team shaping the future of work, all while having some fun along the way.About the role

We're looking for a Senior Application Security Engineer to join our Security team at Pleo. In this role, you'll help shape the future of application security at Pleo and be part of the wider effort to protect our customers’ money and data as we scale. If you're excited about applying security in pragmatic, scalable ways – and are passionate about building resilient financial products – then this is the opportunity for you!

What you’ll be doing

As an Application Security Engineer, you will:

• Partner with engineering teams to design and review secure technical solutions.

• Dive deep into authentication, encryption, and partner integration security topics.

• Help triage and resolve issues identified through our bug bounty program.

• Guide developers on secure coding practices and help fix identified vulnerabilities.

• Support GRC and DevOps teams with automation and security controls in our CI/CD pipelines.

• Help plan, prioritise, and own the Application Security roadmap.

• Drive long-term security initiatives that balance automation, compliance, and access needs.

What you bring

You’ll thrive in this role if you have:

• Strong communication skills and a pragmatic approach to security.

• Experience working closely with developers and product teams.

• Proficiency in at least one server-side language – we mainly use Kotlin and TypeScript.

• Expertise in code review and dynamic testing to identify security flaws.

• A deep understanding of security libraries, controls, and common vulnerabilities.

• Subject matter expertise in at least one technical area of application security.

• A passion for learning and solving unfamiliar or complex problems creatively.

• The ability to approach problems with honesty, curiosity, and clarity.

Experience with the following is a bonus:

• Java or Kotlin proficiency, particularly with securing JVM-based applications.

• Knowledge of PCI DSS, GDPR, or PSD2 and how they apply to application security.

• Supporting compliance efforts such as audits, segmentation, or access controls.

Who you’ll be working with and reporting to

You’ll report to our Head of Security Engineering and work closely with teams in Engineering, DevOps, GRC, and Product. Our team of specialists is highly collaborative and dedicated to enabling secure growth at scale. You’ll also have the chance to work cross-functionally across Pleo to strengthen our security posture in line with company goals.

How you’ll develop in this role

In your first 6 months at Pleo, you’ll:

• Lead and refine our Application Security roadmap.

• Drive improvements in secure development practices across engineering teams.

• Shape and execute long-term security initiatives that support scalable product growth.

We’re committed to helping you develop your career, whether that means taking on bigger projects, mentoring others, or expanding your expertise into new areas.

Show me the benefits!

• Your own Pleo card (no more out-of-pocket spending!)

• Lunch is on us for your work days – enjoy catered meals or receive a lunch allowance based on your local office 🍜

• Comprehensive private healthcare – depending on your location, coverage options include Vitality, Alan or Médis

• We offer 25 days of holiday + your public holidays

• For our team, we offer both hybrid and fully remote working options

• Option to purchase 5 additional days of holiday through a salary sacrifice

• We use MyndUp to give our employees access to free mental health and well-being support with great success so far ❤️‍🩹

• Access to LinkedIn Learning – acquire new skills, stay abreast of industry trends and fuel your personal and professional development continuously

• Paid parental leave – we want to make sure that we're supportive of families and help you feel that you don't have to compromise your family due to work 👶
  
  Please note: We are unable to offer visa sponsorship for this role in any of the listed locations

Why join us?

Working at Pleo means you're working on something very exciting: the future of work. Our mission is to help every company go beyond the books. Pleo itself means ‘more than you’d expect’, and it’s been the secret to our success over the last 8 years. So it’s only fitting that we’d pass this philosophy onto our customers to help them make the most of their finances.

We think company spending should be delegated to all employees and teams, that it should be as automated as possible, and that it should drive a culture of responsible spending. Finance teams shouldn’t be siloed from the rest of the organisation – they should work in unity with marketing, sales, IT and everyone else.

Speaking of working in unity, our values tell the story of how we work at Pleo. We have four core values, the first of which is ‘champion the customer’, which means we address real pain points that businesses face. Next up is ‘succeed as a team’, which highlights how our strength lies in our diversity and trust in each other. We also ‘make it happen’ by taking bold decisions and following through to deliver results. Last but not least, we ‘build to scale’, creating lasting solutions that address today’s challenges and anticipate tomorrow’s needs.

So, in a nutshell, that's Pleo. Today we are a 850+ team, from over 100 nations, sitting in our Copenhagen HQ, London, Stockholm, Berlin, Madrid, Montreal and Lisbon offices —and quite a few full-time remotes in 35 other countries! Being HQ'd out of Copenhagen means we're inspired by things like a good work-life balance. If you don't work in the office with us, we'll help you set up the best remote setup possible and make sure you still have time to connect with your team.

About your application

• Please submit your application in English; it’s our company language so you’ll be speaking lots of it if you join 💕
• We treat all candidates equally: If you are interested please apply through our application system - any correspondence should come from there! Our lovely support isn't able to pass on any calls/ emails our way - and this makes sure that the candidate experience is smooth and fair to everyone 😊
• We’re on a mission to make everyone feel valued at work. That’s only achievable if our team reflects the diversity of the world around us - and that starts with you, hitting apply, even if you are worried you might not tick all the boxes! We embrace and encourage people from all backgrounds to apply - regardless of race/ethnicity, colour, religion, nationality, gender, sex, sexual orientation, age, marital status, disability, neurodiversity, socio-economic status, culture or beliefs.
• When you submit an application we process your personal data as a data processor. Find out more about how your data is used in the FAQs section at the bottom of our jobs page.