Назад
Company hidden
2 дня назад

Security Engineer (Fintech)

80 000 - 100 000€
Формат работы
onsite
Тип работы
fulltime
Грейд
middle
Английский
b2
Страна
Europe
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Security Engineer (Fintech): Building Coinflow’s defensive and offensive security foundation with an accent on SIEM operations, internal penetration testing, vulnerability management, and secure software delivery. Focus on automating reconnaissance and remediation with AI-native tooling, strengthening CI security controls, and producing audit-ready evidence for PCI DSS, SOC 2, ISO 27001, and DORA.

Location: Europe

Base salary: €80,000–€100,000 EUR per year, plus equity grant.

Company

hirify.global is a payment service provider founded in 2023 that uses stablecoins, AI-driven fraud prevention, instant settlement, global pay-ins, multi-currency FX, and unified payouts for marketplaces, fintechs, remittance providers, gaming platforms, and ecommerce merchants.

What you will do

  • Build and operate the SIEM and a SecOps dashboard covering alerts, anomalies, authentication events, infrastructure changes, and audit-ready evidence.
  • Run continuous internal penetration tests against services, APIs, infrastructure, and embedded SDKs, using Claude Security and Claude Code for reconnaissance, fuzzing, code review, and exploit development.
  • Own vulnerability and dependency management, including CVE triage, Dependabot tuning, lockfile hygiene, and gated auto-merges for low-risk upgrades.
  • Define secure-by-default development patterns, review threat models, and integrate SAST, DAST, and secret scanning into CI.
  • Partner with compliance to produce evidence, controls, and monitoring artifacts for PCI DSS, SOC 2, ISO 27001, and DORA.
  • Review, troubleshoot, triage, fix, or escalate security and application issues.

Requirements

  • 4+ years of experience in security engineering, product security, or DevSecOps, ideally in fintech, payments, or another regulated environment.
  • Strong hands-on offensive security skills, including web application, API, cloud, and infrastructure penetration testing.
  • Technical understanding of complex architectures across different cloud hosting providers.
  • Production experience operating a SIEM such as Datadog, Splunk, Elastic, Panther, or similar, and building dashboards for engineering users.
  • Fluency in TypeScript and Node, plus at least passing familiarity with Rust, Go, or Python for code review, bug finding, and security tooling.
  • Experience with vulnerability management at scale, including CVE triage, SCA tooling, and dependency upgrade automation.
  • Comfort using AI-native tooling such as Claude Code and Claude Security as a daily tool, or genuine enthusiasm to adopt it.
  • A bias toward shipping working controls quickly.

Culture & Benefits

  • Direct reporting to the CTO with access to the full engineering organization.
  • Hands-on use of AI-native security tools as force multipliers.
  • Equity grant tied to the company’s long-term success.
  • Health and wellness benefits, a 401(k) savings plan, and flexible time off.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →