Вакансия из Hirify Global, списка международных tech-компаний Для мэтча и отклика нужен Plus
Пожаловаться
Зарплата и рынок
€80к-100к/год
€60к€69кмедиана€110к
По похожим ролям (9) ~ €69к/год
На СНГ рынке: $2.6к/мес ($2.5к - $2.9к)
78
Хорошая вакансия
развернуть
Роль охватывает SecOps, пентесты и безопасную разработку в быстрорастущем финтех-стартапе, но широкий круг задач и ранняя стадия компании добавляют неопределённости.
Кликните для подробной информации
Широкая зона ответственностиБыстрый ростAI в кибербезопасностиФинансовые технологии
Оценка от Hirify AI
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Подключить Plus
Описание вакансии
Текст:
Hirify AI/Оригинал
TL;DR
Security Engineer (Fintech): Building Coinflow’s defensive and offensive security foundation with an accent on SIEM operations, internal penetration testing, vulnerability management, and secure software delivery. Focus on automating reconnaissance and remediation with AI-native tooling, strengthening CI security controls, and producing audit-ready evidence for PCI DSS, SOC 2, ISO 27001, and DORA.
Location: Europe
Base salary: €80,000–€100,000 EUR per year, plus equity grant.
Company
hirify.global is a payment service provider founded in 2023 that uses stablecoins, AI-driven fraud prevention, instant settlement, global pay-ins, multi-currency FX, and unified payouts for marketplaces, fintechs, remittance providers, gaming platforms, and ecommerce merchants.
What you will do
Build and operate the SIEM and a SecOps dashboard covering alerts, anomalies, authentication events, infrastructure changes, and audit-ready evidence.
Run continuous internal penetration tests against services, APIs, infrastructure, and embedded SDKs, using Claude Security and Claude Code for reconnaissance, fuzzing, code review, and exploit development.
Own vulnerability and dependency management, including CVE triage, Dependabot tuning, lockfile hygiene, and gated auto-merges for low-risk upgrades.
Define secure-by-default development patterns, review threat models, and integrate SAST, DAST, and secret scanning into CI.
Partner with compliance to produce evidence, controls, and monitoring artifacts for PCI DSS, SOC 2, ISO 27001, and DORA.
Review, troubleshoot, triage, fix, or escalate security and application issues.
Requirements
4+ years of experience in security engineering, product security, or DevSecOps, ideally in fintech, payments, or another regulated environment.
Strong hands-on offensive security skills, including web application, API, cloud, and infrastructure penetration testing.
Technical understanding of complex architectures across different cloud hosting providers.
Production experience operating a SIEM such as Datadog, Splunk, Elastic, Panther, or similar, and building dashboards for engineering users.
Fluency in TypeScript and Node, plus at least passing familiarity with Rust, Go, or Python for code review, bug finding, and security tooling.
Experience with vulnerability management at scale, including CVE triage, SCA tooling, and dependency upgrade automation.
Comfort using AI-native tooling such as Claude Code and Claude Security as a daily tool, or genuine enthusiasm to adopt it.
A bias toward shipping working controls quickly.
Culture & Benefits
Direct reporting to the CTO with access to the full engineering organization.
Hands-on use of AI-native security tools as force multipliers.
Equity grant tied to the company’s long-term success.
Health and wellness benefits, a 401(k) savings plan, and flexible time off.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →