Dedicated to powering entrepreneurs, Qred is a profitable, fast-growing fintech scale-up bank. In just 10 years, we’ve grown from a startup to hitting 1 billion SEK in annual revenue, supporting over 50,000 entrepreneurs and helping create 10,000+ jobs every year. We combine smart tech with real-world experience to make funding simple, fast, and fair for those who need it most. With strong backing, a flat organization, and bold growth plans, we’re now looking for a Senior SecOps Engineer to join us and shape the future of small business owners.

About the role

As a Senior SecOps Engineer at Qred, you'll be a key leader in the Engineering Enabler team, driving security across our entire tech landscape. Your mandate is to enable product teams to confidently follow Security Best Practices within a robust, compliant framework. Together with an experienced team, you will design, implement, and automate security controls for our Serverless-First AWS architecture using Infrastructure as Code (IaC/CDK). This includes evangelizing critical security practices like threat modeling, deploying automated security tooling, and driving maturity across all engineering practices. Ultimately, you and the team own the systems and practices that protect our customers and our business.

Here's what we are looking for

• Security Command: Deep expertise applying security best practices in cloud environments, minimizing blast radius, and driving systematic vulnerability prioritization.

• DevSecOps Automation: Experience in automating security and governance, including vulnerability scanning , code signing, and secrets management, directly within CI/CD pipelines.

• AWS & IaC Leadership: Experience in defining and managing secure, resilient AWS infrastructure exclusively through IaC (CloudFormation/CDK), with a strong focus on securing Serverless and enforcing least-privilege access.

• GRC & Incident Response: Proven ability to develop robust Incident Response procedures and enforce compliance automation, with valuable experience navigating regulated environments like EBA ICT.

• Observability & Tech Stack: Strong programming skills in languages like Python and/or Typescript, and proficiency managing logging, metrics, and tracing for comprehensive security observability.

One last thing

This is a full-time, permanent position based in our headquarters in Stockholm. While we encourage a hybrid setup, we do expect you to be at least three days per week at the office. We review applications on a rolling basis and while the start date is flexible, the right candidate can join us immediately.

Qred celebrates diversity and does not discriminate based on ethnicity, religion, national origin, gender, sexual orientation, age, disability status, or any other applicable characteristics protected by law.

#LI-Hybrid #LI-JL1