Cybersecurity Engineer

We are seeking a seasoned Cybersecurity Engineer to protect our multi-rail financial platform, safeguarding high-stakes, real-time transactions across crypto custody, card issuance, bill payment aggregators, and bank transfer infrastructure.

In this role, you will lead the defense of our ecosystem protecting mobile application endpoints, cloud infrastructure (AWS), API payment channels, and hot/cold crypto wallet architectures. You will serve as the primary authority on threat modeling, vulnerability management, incident response, and regulatory compliance (PCI-DSS 4.0, ISO 27001, SOC 2, and data protection laws).

What you'll do

Security Engineering & Application Defense

Mobile & Web App Security: Define and enforce secure coding standards (OWASP ASVS) for our Flutter mobile applications and Laravel backend APIs. Conduct regular SAST, DAST, and dependency scanning in CI/CD pipelines.

Payment & API Security: Architect end-to-end encryption, mTLS, HMAC payload signing, and anti-tampering controls for integrations with payment partners, card issuers, and utility providers.

Crypto Security Protocols: Oversee the security posture of crypto hot/cold wallet management, multi-party computation (MPC) keys, address whitelisting, and smart contract/Web3 integrations.

Cloud Security & Identity (AWS)

Zero-Trust Infrastructure: Work with the Cloud Engineering team to enforce zero-trust network boundaries, strict IAM role segregation, and Least Privilege access in AWS.

Secrets & Key Management: Secure cryptographic keys, API tokens, and database credentials using Hardware Security Modules (HSM), AWS KMS, and dedicated secrets managers.

Threat Detection & SIEM: Implement automated logging, threat detection, and real-time monitoring across servers, application logs, and network traffic.

Threat Intelligence & Incident Response

Incident Response: Define, test, and lead the execution of the Incident Response Plan for data breaches, credential stuffing, fraud spikes, or system compromises.

Penetration Testing: Manage internal quarterly vulnerability assessments and coordinate third-party penetration testing (ASV scans, application pentests).

Fraud Prevention Mitigation:* Partner with product engineers to implement velocity checks, anomaly detection engines, and anti-phishing/anti-skimming defenses on customer touchpoints.

Compliance, Audits & Data Governance

Lead technical compliance initiatives to maintain certifications for *PCI-DSS 4.0 (specifically Level 1/2 Cardholder Data Environments), SOC 2 Type II, and ISO 27001.

Ensure strict adherence to regional Data Localization and Data Residency requirements for customer PII and financial records.

Conduct security risk assessments and vendor due diligence on third-party API providers (KYC, card issuers, utility aggregators).