Senior Security Engineer

Role overview

Secure a real-time fraud prevention platform running on multi-region cloud infrastructure and serving regulated customers. This hands-on role spans cloud and infrastructure security, identity, detection and incident response, and engineering-focused security assurance. You will also lead certification and customer assurance work, automating evidence collection and routine reviews wherever practical.

Responsibilities

- Build automated evidence pipelines across cloud, code hosting, CI/CD, and identity systems; select and operate compliance automation tools. - Automate access reviews and routine access requests, and reduce excessive permissions, unused roles, and long-lived credentials. - Add infrastructure and delivery safeguards such as secret scanning, policy checks, signed images, and secure account and cluster baselines. - Investigate alerts, take part in on-call triage, respond to vulnerabilities and bug bounty reports, and contain incidents. - Develop detections using cloud, web application firewall, and Kubernetes signals; review infrastructure changes and validate remediation work. - Lead security programs spanning ISO 27001, ISO 42001, SOC 2, and PCI DSS, including audit coordination, control mapping, and remediation tracking. - Manage customer questionnaires and vendor reviews, maintain security materials, and translate emerging regulatory obligations into engineering work.

Requirements

- At least five years of security engineering experience, including hands-on AWS security work with IAM, CloudTrail, GuardDuty, Security Hub, and WAF. - Ability to investigate incidents using logs and understand how infrastructure and workflow controls enforce policy. - Working knowledge of Terraform, Kubernetes, and GitHub Actions. - Python or a similar language, with experience using APIs and CI pipelines to automate evidence collection, access reviews, or alert enrichment. - Experience leading ISO 27001 or SOC 2 as the primary auditor contact, and handling customer security questionnaires and vendor reviews. - Clear written English and the ability to prioritize work and make decisions.

Nice to have

Experience with ISO 42001 or AI governance, PCI DSS, DORA or financial-sector regulation, detection engineering, incident response, or security tools such as Kyverno, Linkerd, and EKS security tooling.