Staff / Senior Staff Security Engineer (Fintech)

Location: Amsterdam, Netherlands. Hybrid work with 2 recommended office days per week. Remote work is available for up to 90 days per year in the EU, with limited global workation options.

Annual gross salary: €121,600–€205,200, excluding 8% holiday pay.

Company

hirify.global is a European second-hand marketplace with a regulated payments business, hirify.global Pay, supporting secure transactions for buyers and sellers.

What you will do

• Own the hirify.global Pay security roadmap, assess the estate, prioritize real attack paths, and drive risks to closure.
• Translate PCI DSS, DORA, Bank of Lithuania, and FCA requirements into automated security controls and engineering guardrails.
• Review and improve AWS infrastructure, payment pipelines, SIEM and logging, and vulnerability management tooling.
• Design payment-page isolation, script monitoring, encryption, and least-privilege access across multi-region environments.
• Lead security initiatives across Payments Platform, Payments Engineering, and Group Security, contributing code when needed.
• Embed secure development practices into Payments engineering and improve engineers’ security fluency.

Requirements

• Hands-on security engineering experience with large production systems and the ability to threat-model payment flows and implement fixes.
• Experience in regulated payments or fintech, including PCI DSS and work with a financial regulator such as the FCA, Bank of Lithuania, or equivalent.
• Staff- or principal-level experience defining and delivering major technical initiatives across high-scale distributed systems.
• Ability to influence without authority and communicate technical risk to senior internal and external stakeholders.
• Experience with or willingness to learn Ruby on Rails, Go, MySQL, Temporal, AWS, SIEM, and CSPM tooling.
• Excellent written and spoken English required.

Nice to have

• Experience operating systems at massive scale, including more than 2 million requests per minute.
• Knowledge of Kibana, Grafana, Prometheus, AWS IAM, KMS, multi-account and multi-region architecture, Wiz, or SIEM engineering.
• Privacy engineering, offensive security, or OSCP certification experience.

Culture & Benefits

• Hybrid work model with flexibility to work from home and regular in-person collaboration.
• 25 days of paid annual leave, pension plan, daily lunch allowance, and flexible benefits budget.
• Share options programme, hirify.global shopping budget, home-office support, and up to €540 for workplace furniture.
• Annual learning budget starting at €3,000, plus up to 10 working days over two years for development.
• MacBook equipment, employee assistance for employees and families, bike leasing, mobility card, and a dog-friendly office.