Description: Mews provides a platform that helps hotels run more efficiently and create better guest experiences.
Responsibilities:
•Build and maintain application security tooling, including SAST and SCA, integrated into engineering workflows
•Run threat modeling sessions with product and platform teams to identify potential attacks before code is written
•Own and improve Azure cloud security controls, including policy-as-code enforcement and secure-by-default configuration standards
•Contribute to supply chain security by reducing risks from third-party dependencies and delivery pipelines
•Use AI tools to accelerate threat modeling, triage vulnerability findings, and build repeatable security review workflows
•Evaluate AI-generated code for vulnerabilities, surface threat patterns across large codebases, and verify AI-generated outputs
Requirements:
•2–5 years of hands-on security engineering experience in a software company or cloud-native environment, building security capabilities rather than operating existing tooling
•Practical application security experience with SAST, SCA, secret scanning, or container security using modern tools such as Wiz, Snyk, Semgrep, or similar
•Cloud security experience with Azure, AWS, or GCP; Azure is preferred
•Development or scripting experience with Python, .NET, or similar, enabling code review, security analysis, and automation
•AI Fluency Level 3 or equivalent hands-on experience redesigning security workflows with AI, building repeatable processes for others, and verifying AI outputs
Nice to have:
•Familiarity with STRIDE or PASTA
•Supply chain security controls such as SBOM generation, dependency pinning, or pipeline integrity verification
•Technical exposure to European cybersecurity compliance frameworks
Conditions:
•Salary ranges: €57,000 — €70,000 EUR in Spain; 1,191,500 Kč — 1,598,000 Kč CZK in Czechia
•Unlimited paid holiday, company share program, paid parental leave, annual learning budget of €300 (and more for high performers), monthly EDGE time, home office setup budget, monthly work-from-home allowance, and Claude tokens
•Flexible, hybrid working options and a work-from-anywhere policy allowing work abroad for a few weeks each year
•Relocation options available after one year
•Local benefits vary by location and may include healthcare, retirement plans, team events, socials, and other perks
