Product Security Engineer

Responsibilities:

• Conduct security audits, vulnerability assessments, and penetration testing across our infrastructure and applications.
• Implement and maintain security controls for our cloud infrastructure (AWS), databases, and data pipelines.
• Build security into our development lifecycle - review code, APIs, and new features for security implications.
• Monitor, detect, and respond to security incidents and vulnerabilities.
• Manage access controls, secrets management, authentication, and authorisation systems.
• Drive compliance initiatives to meet enterprise customer requirements.
• Establish security best practices and educate the engineering team on secure development.
• Secure our API integrations and ensure safe handling of financial data and PII.

Requirements:

• 4+ years of experience in security engineering, preferably in B2B SaaS or fintech environments.
• Strong understanding of cloud security (AWS), infrastructure security, and application security.
• Experience with securing APIs, databases, and distributed systems.
• Knowledge of compliance frameworks (SOC 2 GDPR, ISO 27001).
• Hands-on experience with security tools for monitoring, scanning, and incident response.
• Ability to work autonomously and build security programs from the ground up.
• Strong communication skills to work across engineering and product teams.
• Experience with DevSecOps practices and CI/CD security.
• Knowledge of setup and tracking with Security Tools (MDM, agents, etc. )

Nice to Have:

• Experience with billing/payment systems or financial data handling.
• Security certifications (CISSP, CEH, OSCP, or similar).
• Experience with data infrastructure.
• Background in building security for early-stage startups.