Impress employers and recruiters.
Choose from hundreds of resume examples.
Impress employers and recruiters.
Choose from hundreds of resume examples.
Tailor your resume to this Principal Security Engineer (AppSec) role.
Rezi rewrites your resume against Teya's job description. Free.
Tailor your resume to this Principal Security Engineer (AppSec) role.
Rezi rewrites your resume against Teya's job description. Free.
Don't guess if your resume is good enough.
See how it scores against the Principal Security Engineer (AppSec) posting at Teya — free, in seconds.
Don't guess if your resume is good enough.
See how it scores against the Principal Security Engineer (AppSec) posting at Teya — free, in seconds.
About the Role
We are hiring a Principal Security Engineer to own the application security side of our joint operating model with product, platform, and infrastructure teams. This role focuses on transforming our SDLC into a secure SDLC, embedding controls that deliver value with minimal friction, and making secure development the default path. You will influence how the company builds software by collaborating with engineers, product managers, designers, operations, and compliance colleagues.
Responsibilities
- Understand and map our actual delivery paths from idea to production.
- Baseline the application estate to establish a clear view of coverage, risk, and gaps.
- Build relationships and embed with engineering teams to run threat modeling sessions.
- Identify high-leverage controls that measurably reduce risk and accelerate delivery.
- Design and roll out Secure SDLC (SSDLC) controls, patterns, and checkpoints.
- Implement shift-left security practices with secure defaults in templates, libraries, and paved roads.
- Integrate security controls into the pipeline using policy-as-code and existing security toolchains (SAST, SCA, secrets, DAST).
- Establish threat modeling as a routine practice during the design stage.
- Build a security champions network and create enablement materials for self-service.
- Refine risk assessment to focus on exploitable attack paths rather than severity labels.
- Build patterns, tooling, and shared understanding to scale security through leverage and culture.
- Automate security processes to ensure controls are applied efficiently.
- Operate transparently with public requests and visible backlogs.
- Manage a defined split between roadmap, keep-the-lights-on, and unplanned work.
Requirements
- Deep application security expertise, both theoretical and practical.
- Experience transforming SDLC to SSDLC, understanding where and how to introduce security controls for maximum value and developer velocity.
- Ability to think like a malicious actor and identify actionable weaknesses and attack chains.
- Fundamental understanding of security principles, adaptable to various tools and technologies.
- Excellent communication skills to explain complex technical concepts to non-technical audiences.
- Genuine team-first instinct, with a collaborative approach to advising, enabling, and persuading.
- Penetration testing knowledge or experience (application, infrastructure, cloud, red teaming).
- Familiarity with operating in a regulated environment (PCI-DSS, ISO27001, DORA).
- Developer and engineering mindset with a practical understanding of professional software development.
- Comfort engineering solutions with Go.
- Practical cloud security depth, including identity, workload isolation, and production-ready patterns.
- Applied cryptography exposure, including PKI and HSM management.
Skills
- Application Security
- SDLC Transformation
- Threat Modeling
- Security Controls Implementation
- Policy-as-Code
- SAST
- SCA
- Secrets Management
- DAST
- Go
- Cloud Security
- Cryptography
- Communication
- Collaboration
- Influence
- Automation
Location
- Europe
Work Type
- Hybrid Working
Experience Level
- Principal
Salary/Compensations
- Competitive package
Benefits
- Room to grow
- Support for developing skills and capabilities
- Path to management as the function grows
- Mandate to fix real problems
About the Company
- Teya is a financial platform for local businesses across Europe, built around simple tools, thoughtful design, and real human support.
- We are a regulated payments fintech operating across multiple European markets, scaling into banking-licence territory.
- Our mission is to provide local businesses with better financial services, moving fast, caring about quality, and staying close to the detail.
Equal Opportunity
- Teya is proud to be an equal opportunity employer.
- We are committed to creating an inclusive environment where everyone regardless of race, ethnicity, gender identity or expression, sexual orientation, age, disability, religion, or background can thrive and do their best work.
- We believe that a diverse team leads to better ideas, stronger outcomes, and a more supportive workplace for all.
- We encourage candidates to let us know if they require any reasonable adjustments at any stage of the recruitment process.