Senior Security Engineer

About us

SoftCo is an AI-native Procure-to-Pay (P2P) and Accounts Payable (AP) automation company built for complex organisations. In a market full of rigid templates and “plug-and-play” promises, our approach is different. We tailor automation around the organisation, not the organisation around the software.

For over 35 years, we’ve helped finance teams move from reactive, manual processes to controlled, scalable and strategic P2P operations. Our AI-native platform strengthens accuracy, visibility and insight, but it’s our delivery expertise that ensures it works in the real world.

Our success at a glance:

• 1M+ users worldwide

• Trusted by organisations including Volkswagen, Patagonia, Primark, Logitech and all 80 departments of the Finnish Government

• Global reach with offices in the US, Finland, UK, Kosovo and Ireland

• A reputation for owning where precision engineering meets long-term partnership

Join as a Senior Security Engineer and help shape the future of intelligent finance operations.

Your role

We are looking for a senior, hands-on Security Engineer to own security across SoftCo: our SaaS product and the code behind it, the cloud platform it runs on, and the corporate environment our people work in. This is an individual contributor role for a technical specialist, not a management role.

You will build on the strong foundations we already have, protecting customer data, building security into how we develop and ship software, and keeping pace with emerging risks such as AI. You will be equally comfortable reviewing a pull request or tuning a cloud policy, and explaining a risk in plain language to a colleague in Finance, HR or Sales.

You will work closely with the Head of Engineering on product security and with our Compliance Officer on our certifications.

Your responsibilities

Product and application security

• Embed security across the development lifecycle: threat modelling, secure design and code reviews, and clear secure coding standards and reusable patterns.
• Build and maintain security automation in our CI/CD pipelines, including SAST, DAST, software composition analysis and infrastructure-as-code scanning.
• Scope and manage third-party penetration testing, triage findings and drive timely remediation, with fixes tracked as tickets on engineering teams' boards.
• Act as a hands-on advisor to developers and grow a lightweight security champions network in Engineering.

Cloud and corporate infrastructure security

• Harden and monitor our production cloud environments (AWS and Azure), including identity and access management, network zoning and logging.
• Own security for our corporate environment: endpoint management (MDM), single sign-on (SSO) and access controls for employees and internal systems.
• Carry out regular technical security reviews of internal tooling, vendors and SaaS integrations.

Detection, response and emerging risk

• Lead investigation and root cause analysis for security incidents across application, cloud and corporate systems.
• Define practical policies and technical controls for safe AI use, in our product and across the business, including LLM data leakage, API key security and AI coding assistants.
• Assess the security posture of third-party AI tools adopted by internal teams, and track new attack vectors and vulnerabilities, acting on them early.

Working with the business

• Act as technical owner, alongside the Compliance Officer, for maintaining our ISO 27001, SOC 1 and SOC 2 certifications.
• Work with business teams to understand how they work and find security measures that protect us without slowing them down.
• Run practical security awareness initiatives, including defence against social engineering.
• Align the security roadmap with engineering and business priorities and report clearly on risk and progress.

What success looks like

Working at SoftCo

Your profile

• Experience: 5+ years of hands-on security engineering experience, ideally in a fast-growing B2B SaaS environment.
• Application security: Proven experience securing applications and the SDLC (OWASP, SAST, DAST, SCA), including embedding security in Agile and DevOps teams.
• Infrastructure security: Solid knowledge of cloud security (AWS and Azure preferred), CI/CD pipelines, container security and IAM, plus practical experience securing endpoints, SSO and corporate SaaS.
• AI literacy: Good understanding of the security risks of AI and LLMs (for example prompt injection, data poisoning and privacy risk), in both product engineering and internal use.
• Communication: Able to explain technical risk clearly to non-technical colleagues and earn their trust, while holding credibility with engineers.
• Approach: Autonomous and pragmatic, balancing security requirements with the speed the business needs, with an investigative, root-cause mindset.
• Education: Degree in Computer Science, Information Security or a related field, or equivalent experience. Certifications such as OSCP, OSWE, CSSLP, CISSP or equivalent are a plus.

What We Offer

• Competitive remuneration and performance-based bonus  

• Company-paid health insurance, pension and life assurance  

• Hybrid Working Model (3 days per week in office following onboarding period)  

• On-site gym with company-funded fitness classes (Dublin office)  

• Long service incentive awards and employee referral programme  

• Structured learning and development investment  

Our structure gives you real ownership and direct exposure to senior leadership. Progression is based on capability, not hierarchy. 

Our culture

Our culture is built on the values that shape how we work together and how we deliver for our customers. 

Initiative, accountability, and collaboration are central to how we operate. Our teams work across disciplines and locations to solve complex problems and deliver meaningful outcomes. 

We encourage clear thinking, ownership and continuous learning. Expertise is respected and people are trusted to take responsibility for the work they lead.

Different perspectives strengthen our teams and improve the systems we build. We are committed to creating an inclusive environment where everyone can contribute and grow. 

SoftCo is proud to be an equal opportunities employer and welcomes applications from all backgrounds. Learn more at softco.com/about-us.