Security Engineer

Hello. We’re Teya.

Teya was founded on a simple belief: local businesses deserve better.

They are the cafés, restaurants, salons, shops and entrepreneurs that bring character to our high streets, create jobs and keep communities moving. Yet for too long, financial services has made life harder for them - with clunky tools, poor support and complexity that gets in the way of running a business.

Teya exists to change that.

We’re building a financial platform for local businesses across Europe - one built around simple tools, thoughtful design and real human support. Our Members rely on us to help them run their business with confidence, and that responsibility shapes the way we work.

We move fast. We care about quality. We stay close to the detail. And we believe great performance and genuine hospitality should go hand in hand.

If you want to build meaningful products, solve real problems and make a genuine difference for local businesses, we’d love to hear from you

About the role

We're a regulated payments fintech operating across multiple European markets, scaling into banking-licence territory. Security Engineering is being rebuilt around a joint operating model with our product, platform, and infrastructure teams. We're hiring a Principal Security Engineer to own the application security side of that model: how software gets designed, built, reviewed, and shipped safely across a growing engineering estate, and how security shows up as an accelerator rather than a toll gate.

This is not a review-queue role, and it is not a role about counting findings. We're not looking for someone to triage scanner output, chase "critical" CVE counts, or sign off tickets. We want an engineer who changes how the company builds software: transforming our SDLC into a secure SDLC, placing controls where they deliver the most value for the least friction, and making the secure path the default path.

The thread running through everything here is influence. You will spend as much time with engineers, product managers, designers, operations, and compliance colleagues as you do with code and tooling. The person who succeeds in this role is the person who can walk into any team, explain the risk in language that team actually uses, and leave them better equipped than when they arrived.

What you'll work on

First 90 days

• Understand how we actually build. Map our real delivery paths, from idea to production, across the teams that matter most. Find where security currently lands too late, too heavily, or not at all.