Security Engineer – EU/UK

🕒 July 28

🇩🇪 Germany – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 26%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Pliant

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 2020

💳 Fintech

☁️ SaaS

🤝 B2B

💰 $40M Series B - Pliant on 2025-04

Fintech • SaaS • B2B

Pliant is a credit card platform that enables businesses, banks, and fintechs to issue and manage credit cards, automate payments, and optimize spend and accounting workflows. Pliant offers Payment Apps, a Pro API for card issuance and automation, Cards-as-a-Service (CaaS) and Banking-as-a-Service (BaaS) to embed or white-label card programs, plus global accounts, FX and transfers, credit & financing, and compliance and enablement services. It serves corporations, e-commerce, resellers, SaaS companies, travel and marketing agencies, and banks with features like real-time monitoring, spend controls, receipt management, integrations with accounting and expense systems, single-use virtual cards, and API-driven automation. Pliant holds e-money licensing in the EU, issues cards in the UK, is PCI DSS and ISO/IEC 27001 certified, and focuses on B2B payment optimization and embedded finance solutions.

📋 Description

• Integrate security best practices throughout the SDLC to protect products, infrastructure, and customer data. • Design, implement, and maintain security automation tooling to address problems at scale (e.g., patch management, vulnerability management, compliance evidence collection). • Embed security controls and guardrails into the developer platform to enable secure and efficient delivery. • Define and promote “Paved Roads” - reusable, secure development standards and Terraform/Docker modules. • Harden containerized workloads (ECS and EKS) - ensure clusters follow security best practices for isolation, networking, and access control; Maintain secure, up-to-date base images; enforce image signing and provenance; implement admission control, least-privilege IAM roles, and runtime anomaly detection. • Deploy and manage cloud security platforms (e.g., Wiz) and drive remediation workflows. • Automate collection of audit-ready evidence for frameworks like PCI DSS, ISO 27001, SOC 2, and DORA. • Support vulnerability management (triage, SLAs, RCA) and lead incident response and post-mortems. • Conduct threat modeling, architecture reviews, and provide guidance on secure design and cryptography. • Build and maintain security documentation, internal tooling, and feedback loops to strengthen security culture. • Act as a security SME across application, cloud, and compliance domains.

🎯 Requirements

• 5+ years of experience in a technical security role, preferably in a cloud-native or fintech/SaaS environment. • Strong proficiency with AWS services and security (IAM, KMS, CloudTrail, S3, GuardDuty, SCPs, etc.). • Solid understanding of DevSecOps practices and integrating security into CI/CD workflows. • Proficient in Terraform and other IaC tooling, capable of writing secure, reusable modules and enforcing guardrails. • Proficient in Python, Bash, or TypeScript – capable of scripting and building automation tools. • Experience securing containers (Docker, ECS, EKS, or Kubernetes) and implementing hardened images. • Expert level understanding of OWASP Top 10, secure coding, and software supply chain risks. • Experience managing and integrating cloud security platforms (e.g., Wiz, Orca, Lacework, Prisma Cloud). • Understanding of vulnerability management and remediation workflows at scale. • Experience with application security practices, including code review, threat modeling, static and dynamic analysis (SAST, DAST), and attack surface analysis. • Experience performing Application Penetration Testing or Vulnerability Research / Bug Bounty Hunting. (Ability to discover and identify fixes for SQLi, XSS, CSRF, SSRF, authentication and authorization flaws, and other web-based security vulnerabilities) • Experience with threat modeling or security reviews. • Excellent communication skills and empathy, security is a complex topic that you have to be able to explain to audiences of various levels of previous exposure or learning.

🏖️ Benefits

• Attractive remuneration • Your choice of preferred OS, Windows or Mac • Flat hierarchy and transparent communication in a relaxed, professional atmosphere • Opportunity to develop your talent in a dynamic team with ambitious goals • Flexibility and possibility to work remotely • Company card with a monthly allowance for lunches, coffee, etc. with co-workers

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume