Security Engineer

At Epignosis our mission is simple yet bold:
To make learning technologies accessible to every business, regardless of geography, sector, or company size. And we’ve been doing just that for more than a decade, empowering millions of people to grow, learn, and thrive through technology that’s both powerful and affordable.

We're rapidly becoming one of Greece's largest SaaS companies, serving 12,000+ companies and 22+ million learners worldwide with solutions like TalentLMS (an award-winning cloud LMS built for simplicity), eFront (an enterprise LMS), Talent Cards (a mobile app for deskless training), and TalentHR (a lightweight HRIS for people operations).

Our success is built on a team that believes that work should matter — not only to you, but to the world around you. We're looking for people who light up when solving hard problems, who care deeply about their craft, and who want to build something that genuinely helps people grow.

We're searching for a hands-on Security Engineer with a strong software engineering background to help strengthen security across our products and development lifecycle. You will work closely with our engineering teams to identify and address practical security risks, review designs and code, improve security automation, and help embed security into the way we build and operate our products.

The ideal candidate combines strong application security knowledge with solid engineering fundamentals and a pragmatic approach to risk. You should be comfortable working directly with developers, understanding production code and architecture, and turning security findings into clear, actionable solutions.

As a Security Engineer, you will:

• Perform application security reviews across product designs, architecture, and production code, and conduct threat-modelling exercises for new and existing functionality.
• Partner with engineering teams to investigate security vulnerabilities, assess their impact and support effective remediation.
• Identify and prioritise security risks, providing developers with clear, practical, and actionable remediation guidance.
• Improve and automate security controls within CI/CD pipelines and software development workflows, helping identify security issues earlier in the development lifecycle.
• Assess the security of APIs, third-party integrations, AWS environments, and architectural changes.
• Develop practical security tooling, automation, guidelines, and engineering standards that enable development teams to build secure software.
• Collaborate with engineering teams to continuously improve secure development practices and strengthen security across our products and infrastructure.

To be successful in this role as a Security Engineer, you should have:

• Professional experience in application security, product security, software engineering, or another relevant technical role.
• Strong software engineering fundamentals and the ability to understand, navigate, and review production code.
• Strong knowledge of application security principles, common vulnerability classes, and secure software development practices.
• Practical experience with threat modelling, security testing, CI/CD environments, APIs, and cloud-based applications.
• Ability to assess and prioritise security risks based on their real-world impact and provide clear, actionable remediation guidance.
• Strong analytical and problem-solving skills, with a pragmatic approach to balancing security and engineering requirements.
• Strong written and verbal communication skills and the ability to collaborate effectively with software engineers and other technical stakeholders.
• Fluency in English.

Experience in the following areas would be considered a plus:

• Building security tooling, automation, or developer-focused security controls.
• Hands-on experience securing AWS environments, particularly around compute infrastructure, network and application protection, security monitoring, and threat detection.
• Identity and access management (IAM).
• Incident response and security investigations.
• Penetration testing or security research.

You are not expected to meet every nice-to-have requirement. We value strong engineering…