FREE ACCESS
5,000–10,000 jobs/day
See all jobs on JobTailor
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Tech Stack
Tools & technologiesCloudFirebaseGoogle Cloud PlatformJavaScriptNode.jsSDLCTerraformTypeScript
About the role
Key responsibilities & impact- Lead design and delivery across our Node.js / TypeScript backend and platform, balancing security and platform work with the product-adjacent building that keeps us shipping
- Own and harden our GCP, Cloudflare, and Firebase infrastructure - IAM, networking, secrets management, and infrastructure-as-code (Pulumi TypeScript & Terraform)
- Embed security into the SDLC: threat modeling, secure code review, and CI/CD security guardrails (SAST/DAST, dependency scanning)
- Run vulnerability management end to end - triage, remediation, coordinating external penetration tests, and enhance our vulnerability disclosure programme
- Own detection, logging, and incident response, including endpoint detection & response (EDR) and security monitoring in Datadog
- Lead anti-phishing, spam, and platform-abuse detection and prevention
- Drive identity and access governance - SSO, OAuth, and IAM audits and improvements
- Drive our SOC 2 / ISO 27001 and privacy (GDPR) efforts, turning compliance requirements into pragmatic engineering controls
- Set technical standards and mentor engineers, raising the bar for how the whole team builds and ships securely
Requirements
What you’ll need- Tech Lead–level experience as a strong backend engineer with a security focus, ideally in Node.js / TypeScript
- Solid application/product security fundamentals - OWASP, secure design, code review, API security
- Hands-on cloud experience (GCP ideal; Cloudflare/Firebase a plus) and infrastructure-as-code (Pulumi in TypeScript; Terraform or similar experience translates well)
- Detection & response depth - EDR, security monitoring / SIEM, and incident response. Hands-on experience with Datadog is highly desirable.
- Familiarity with security tooling (SAST/DAST, Snyk/Dependabot/Renovate, secrets scanning, secrets management) and vulnerability management
- Identity / auth depth - OAuth, SSO, and end-user authentication
- Exposure to SOC 2, ISO 27001, or GDPR/privacy in a SaaS environment. Compliance automation (e.g. Vanta) a plus
- A pragmatic, build-first mindset - comfortable owning ambiguity and setting direction in a scaling startup
- Strong communication and the ability to lead and mentor without heavy process
Benefits
Comp & perks- Equity and ownership. We're building something massive and we want you to share in the upside. Genuinely.
- Competitive salary and a real growth path. As Blinq grows, your role and compensation grow with it.
- Time to switch off. 20 days of annual leave plus a flexible policy for everything life throws at you beyond that.
- Good times, often. Team lunches, padel, games nights, Barry's sessions. We like hanging out and it shows.
- Regular catered lunch at some of our offices, plus an always-stocked snack bar.
ATS Keywords
✓ Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills & Tools
Application Security FundamentalsInfrastructure-as-Code (Pulumi, Terraform)Threat ModelingSecure Code ReviewAPI SecurityIdentity and Access Management (IAM)OAuthSSOCI/CD SecurityIncident Response
Soft Skills
Strong CommunicationMentoringLeadershipPragmatic MindsetAbility to Navigate Ambiguity