Назад
Company hidden
4 дня назад

Security Engineer | Generalist (Fintech)

Формат работы
hybrid
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
UK/US/Poland +1 еще
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Security Engineer | Generalist (Fintech): Building and improving SIEM detection rules, automated response playbooks, cloud security controls, and AI/agentic workflow safeguards with an accent on incident readiness, application security, and third-party risk. Focus on designing detection engineering and vendor due diligence processes, securing AWS and Kubernetes environments, and controlling risks from LLM integrations and automated actions.

Location: Hybrid in London, Mexico City, Krakow, or New York; 3–4 days per week in-office

Company

hirify.global is building a fintech app for the Latin American market.

What you will do

  • Build and improve SIEM detection rules, alert pipelines, and automated response playbooks using Datadog SIEM, CrowdStrike, and Cloudflare.
  • Improve incident response readiness through playbooks, tabletop exercises, and forensic procedures.
  • Support DLP strategy and data protection controls across Google Workspace, Slack, and internal tooling.
  • Assess and secure AWS and Kubernetes environments, including cloud infrastructure security.
  • Drive application security initiatives including threat modelling, secure code review support, API testing, and security pipeline improvements.
  • Assess AI/agentic workflows and establish vendor security assessment and third-party due diligence processes.

Requirements

  • 4–7 years of cybersecurity experience, ideally having built or significantly shaped security at a startup or high-growth company.
  • At least 2 years of experience at a regulated fintech, bank, or payment company.
  • Hands-on cloud infrastructure security experience with AWS and Kubernetes.
  • Working knowledge of SIEM platforms and detection engineering, including writing detection rules.
  • Experience with threat modelling, secure code review, CI/CD pipeline hardening, and API security testing.
  • Experience with endpoint security tooling, EDR/XDR, and identity and access management in SaaS-heavy environments, including Google Workspace, Okta or Cloudflare Access, SSO, and SCIM.
  • Ability to assess and secure AI/agentic tooling, including LLM integrations, MCP servers, automated workflows, practical guardrails, and data exposure risks.
  • Experience running or contributing to vendor security assessments and third-party due diligence.
  • Strong written and verbal communication skills.
  • Business-fluent English required.

Culture & Benefits

  • Competitive salary and benefits.
  • Stock options and a discretionary performance bonus.
  • Access to the latest tools and technology.
  • Opportunity to work with a team focused on building a fintech app for Latin America.
  • Hybrid office policy requiring 3–4 days per week in-office.

Будьте осторожны

Если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого. Это мошенники. Обязательно жмите «Пожаловаться» или пишите в поддержку. Подробнее в гайде →