O pozici
Hello! We're Teya.
Teya is a payment and software service provider, headquartered in London serving small, local businesses across Europe. Founded in 2019, we build easy to use, integrated tools that enable our members to accept payments and boost business performance.
At Teya we believe small, local businesses are the lifeblood of our communities.
We’re here because we don’t believe there’s a level playing field that gives small businesses with a fighting chance against the giants of the high street.
We’re here because we see banks and legacy service providers making things harder for them. We don’t think the best technology or the best service should be reserved for those with the biggest headquarters.
We’re here to fight for a future where small, local businesses can thrive, and to commit the same dedication they offer all of us.
Become a part of our story.
We’re looking for exceptional talent to join our mission. We offer a chance to create impact in a high-energy and connected culture, while benefiting from continuous learning opportunities, a supportive community which is proud to serve our mission, and comprehensive benefits.
Co budeš dělat
- Design, implement, and continuously improve a Secure SDLC integrated from design through production
- Embed security into planning and delivery via threat modelling, security requirements, and automated controls
- Lead application security reviews for new systems, major features, and high-risk changes across web, API, mobile, and backend services
- Define and maintain secure architecture patterns for authentication, authorisation, APIs, data protection, and multi-tenant isolation
- Own the application security tooling stack (SAST, DAST, SCA), integrating it into CI/CD with high-signal, low-noise outputs
- Partner with engineers to triage and remediate vulnerabilities based on exploitability, impact, and regulatory risk
- Work with Security Operations to improve application-level logging, telemetry, and incident response readiness
- Act as a trusted advisor to engineering teams, raising the bar through practical guidance, documentation, and targeted training
Koho hledáme
- 6+ years’ experience in application security, security engineering, or software engineering with a strong AppSec focus
- Demonstrated experience designing or operating Secure SDLC practices in fast-moving product teams
- Hands-on expertise in web and API security, including authentication, authorisation, data flows, and common vulnerability classes
- Proven experience integrating SAST, DAST, and SCA into CI/CD pipelines
- Strong threat modelling and secure design skills for complex, cloud-native systems
- Experience with modern backend and frontend or mobile stacks (e.g. JVM, Node.js, Go, TypeScript)
- Familiarity with AWS and cloud-native architectures (IAM, KMS, containers, microservices)
- Clear, pragmatic communication skills and the ability to influence through partnership rather than mandate
Benefity
- We trust you, so we offer flexible working hours, as long it suits both you and your team;
- Health Insurance;
- Physical and mental health support through our partnership with MyFitness;
- 25 days of Annual leave (+ Bank Holidays);
- Possibility to visit other Teya offices to meet colleagues in instances when travel is safe and appropriate;
- Friday lunch in the office;
- Friendly, comfortable and high-end work equipment and informal office environment;
- Hybrid work mode policy.
