Are you a technically skilled, hands-on security professional who’s passionate about providing the most secure and automated solutions to global teams of software engineers? Join us at SEON and explore the opportunity to join a world-class research and development organization that is as passionate about privacy and security as we are about creating incredible experiences for our software engineers. Those great experiences ensure that we can deliver world class security and peace of mind to the customers we are obsessed with!

SEON provides an API-first solution that helps our customers (many of the world’s leading providers of digital experiences in financial services, insurance, entertainment, etc) defend their customers from Fraud and Financial Crimes. With over 250 Fraud Fighters across four global offices (Austin, Budapest, London, and Jakarta), our goal remains unwavering: to make the internet safe for businesses and customers to transact. Our achievements, including a record-breaking Series B funding round and recognition in TechCrunch, have led to recognition as the World’s quickest-growing fraud prevention company. We take pride in our rapid growth and mission to democratize fraud-fighting while empowering the best online businesses. Join us in our journey to make the internet safer for everyone.

What you’ll do:

As the Senior Security Engineer at SEON, you will be responsible for the ownership, security, and optimization of the technology ecosystem that supports our global engineering teams. In this role, you will:

Provide security insights during the planning phase of application development
Define security architecture plans for security-intensive development work
Conduct manual dynamic security tests for new and existing functionality
Review application code from a security point of view
Research, develop, test and implement automated security tools that can be used to increase further the security of the CICD pipeline and overall application code
Validate pentest and bug bounty findings
Facilitate the remediation of application security issues
Plan, implement and maintain infrastructure security controls in AWS
Ensure the appropriate security posture of our Kubernetes clusters
Definition, operation and supervision of infrastructure related processes (patching, hardening, etc)
Cooperate with the DevOps Team in infrastructure and CICD related projects
Plan and review infrastructure changes from a security perspective
Solve automation and GitOps tasks with GitHub Actions, Lambdas, etc.
Support audit compliance (SOC2 and ISO27001)

What you bring:

In-depth understanding of application vulnerabilities (OWASP and similar)
Extensive experience with penetration testing and application code review (Typescript, Java, Python)
Expertise in API (Java) and Web application (NodeJS, React) security
Experience with SAST tools (preferably Semgrep) and how to integrate them into CICD pipelines
Ability to use Python and bash script for automation
In-depth knowledge of AWS and Kubernetes
Advanced use of Terraform
Familiarity with GitHub and GitHub Actions
Thorough understanding of infrastructure security-related concepts (network security, encryption, OS security (Linux), patch and hardening, IAM, etc.)
DevOps background is an advantage

Most Desirable Soft Skills:

You are a motivated, lifelong learner and always looking to improve
Exceptional communication and interpersonal skills
Ability to manage conflicts and problems
Strong ability to communicate in professional English
Ability to understand and explain complex concepts in a simplified manner to all audiences
Ability to work independently with little oversight on complex projects

What we offer:

Employee stock ownership plan (ESOP)
Flexible hours
Generous Holiday allowance
Access to significant opportunities for learning and development
Private health insurance including dependants (inc. employee assistance & mental health support)
Complimentary weekly language courses
Enhanced Parental leave