At a Glance
- Tasks: Lead security initiatives to protect customer data and money at Spiko.
- Company: Join a fast-growing fintech startup backed by industry leaders.
- Benefits: Competitive salary, stock options, remote work flexibility, and health insurance.
- Other info: Dynamic work environment with opportunities for professional growth and collaboration.
- Why this job: Make a real impact in securing financial data and shaping security culture.
- Qualifications: 5+ years in security engineering with strong knowledge of compliance frameworks.
The predicted salary is between 63000 - 77000 £ per year.
Our Mission
Money sitting idle is money lost. We're fixing that.
Our Mission
Money sitting idle is money lost. We're fixing that.
Founded in 2023 by Antoine and Paul-Adrien, Spiko gives businesses, non-profits, financial advisers, and fintechs access to institutional-grade cash management, via app or API.
We are building the full infrastructure: issuing, operating, and distributing the products ourselves.
Two years after launch, we serve thousands of organizations across Europe and process hundreds of millions of euros in flows every month.
Our ambition: become the world's leading treasury management infrastructure in a market worth trillions.
We are backed by Index Ventures, the CEO of Revolut, the founder of Kyriba, and the CTO of Wise.
Spiko runs on excellence, transparency, and straight talk.
The role: (Job Title)
Your core mission is simple
make our customers' data and money safe
As head of security, you own security at Spiko end to end: application, infrastructure and cloud security, identity and access, vulnerability management, pentests and AI-driven security testing, detection and incident response, and the security culture of the whole company.
You define the roadmap and set the priorities.
In return, you get full ownership.
This role sits within Spiko’s tech team.
- Your Second-order Missions Are
- Own our compliance framework.
Bring ISO 27001 certification over the line and keep it, lead our DORA implementation, and put in place the policies, controls and evidence collection that regulators, auditors and partners expect from a company that manages client money.
You work hand in hand with our legal & compliance team on this.
- Support the business on security due diligence.
Large partners and Spiko Embedded clients run security due diligence on us before they integrate.
You work to answer their questionnaires or enable the sales team to do it, to present our security posture to their teams, and makes our security a selling point.
- Our stack
- Cloud: AWS, GCP, Cloudflare
- Infrastructure as Code: Terraform
- Orchestration & Deployment: Kubernetes, Docker, Qovery
- Databases: Postgre SQL
- Observability: Datadog (logs, traces, metrics, RUM)
- Identity & Access: Ory (Kratos, Hydra, Oathkeeper)
- CI/CD: Git Hub Actions
- Application stack: Type Script, NX, Effect, React
Requirements (must-haves)
- Who we’re looking for
- 5+ years of experience in security engineering roles
- Solid understanding of application security, network security, and cloud security best practices
- Experience with security audit processes, vulnerability management, and compliance frameworks (ISO 27001, SOC 2, or similar)
- Familiarity with CI/CD security tooling (SAST, DAST, dependency scanning, container scanning)
- Experience with automated pentesting tools or AI-driven security testing
- Comfortable working autonomously and defining your own roadmap
- Comfortable working in an English-speaking environment
- Curious, pragmatic, and eager to learn
- Nice To Have
- Experience in fintech, capital markets, or other highly regulated environments
- Knowledge of blockchain infrastructure or Web3 security
What We Offer
- Compensation: Competitive package depending on experience + Stock Options
- Offices: in central Paris & London
- Remote work: up to 2 days per week and one full remote week per month
- The best tech for your job: latest-generation laptops and industry-leading software
- Health insurance: 100% covered by Spiko
- Monthly Budget to cover different perks of choice
- Transport: 50% of public transport pass covered or the Forfait Mobilités Durables (FMD)
- Referral Bonus
- Social life: regular afterworks and biannual offsites
- Our hiring process
- Screening Interview - 30 min screening call with Talent Acquisition
- Hiring Manager Interview - 30 min with Nicolas, Tech Lead
- 45 min technical interview focused on infrastructure & security with one engineer (remote)
- 2h hands-on technical session with two engineers (infrastructure design, security scenario) (in the office)
- Final Interviews with the Founders
- Reference Check: we'll reach out to your references to gather further insights
- Offer
If something here doesn't match your résumé perfectly but you believe you'd thrive in this role, apply anyway. Tell us why.
#J-18808-Ljbffr
Head of Security employer: Spiko
At Spiko, we pride ourselves on being an exceptional employer that fosters a culture of excellence, transparency, and innovation. Located in the vibrant heart of Paris, we offer our employees competitive compensation packages, stock options, and the flexibility of remote work, all while providing access to cutting-edge technology and a supportive environment for professional growth. Join us as we revolutionise treasury management and enjoy a dynamic workplace where your contributions directly impact thousands of businesses across Europe.
StudySmarter Expert Advice🤫
We think this is how you could land Head of Security
✨Get Involved in the Cybersecurity Community
Diving into the cybersecurity community is key for landing that full-time gig. Join forums like Reddit's r/cybersecurity or attend local meetups to connect with industry veterans and other job seekers. Networking is everything in this field—don’t just be a passive lurker!
✨Show Off Your Skills with Capture the Flag Competitions
Participate in Capture the Flag (CTF) competitions; these are not just a fun way to boost your skills but also a chance to showcase your talent to potential employers. Many companies, including Spiko, love seeing candidates who actively engage in these challenges.
✨Tailor Your Online Presence
Make sure your LinkedIn and any professional profiles reflect your cybersecurity expertise. Share your projects, whether they’re personal or from a previous role, to catch the eye of hiring managers. This is how they’ll find your passion and commitment to the field!
✨Apply Directly Through Spiko
Don’t forget to head straight to our website and check out any openings for cybersecurity roles at Spiko. Applying directly can sometimes give you an edge, especially if you can mention that you've been following our work or engaging in the community.
We think you need these skills to ace Head of Security
Some tips for your application 🫡
Show off your technical skills:In cybersecurity, it's crucial to highlight your technical prowess. Make sure your CV showcases specific skills like network security, penetration testing, or threat analysis. If you have relevant certifications (like CEH or CISSP), pop those on the front page to grab attention!
Tailor your portfolio for the role:Even for a full-time role, a portfolio can set you apart. If you've worked on any cybersecurity projects—be it CTF challenges, security assessments, or research papers—include these in your application. This demonstrates not just your skills, but also your hands-on experience!
Use real-world examples:When writing your cover letter, don’t just stick to your qualifications. Share real-world examples of how you’ve tackled security issues or vulnerabilities. This gives the hiring team at Spiko insight into your practical problem-solving abilities and makes your application memorable.
Demonstrate your passion for cybersecurity:Cybersecurity is an ever-evolving field, so show us that you’re always learning! Mention any recent courses, webinars, or industry events you’ve attended. This not only exhibits your enthusiasm but also signals to Spiko that you’re committed to staying ahead in the game.
How to prepare for a job interview at Spiko
✨Sharpen Your Technical Skills
For a role in cybersecurity, it’s essential to be up-to-date with the latest tools and techniques. Brush up on your knowledge of firewalls, intrusion detection systems, and vulnerability assessment tools. Be ready to discuss specific scenarios where you’ve applied these skills, as hands-on experience can really set us apart in interviews.
✨Prepare for Scenario-Based Questions
Expect the interviewers at Spiko to throw in some hypothetical situations to see how you’d handle them. Think about common security breaches or incidents and be prepared to explain how you would respond. This not only shows your problem-solving skills but also your understanding of real-world cybersecurity challenges.
✨Highlight Your Certifications
Certifications like CompTIA Security+, CISSP, or CEH can give you a significant edge in a full-time role in cybersecurity. Make sure to mention these during your interview and be prepared to discuss what you learned through those certifications and how they relate to the position at Spiko.
✨Show Your Passion for Cybersecurity
Since you’re going for a full-time gig, showing genuine enthusiasm for the field can make all the difference. Share any personal projects, blogs, or communities you’re part of that relate to cybersecurity. This not only showcases your passion but also your commitment to staying engaged in this ever-evolving field.
