Security Engineer – EU/UK

Emploi pas sur LinkedIn

🕒 il y a 8 jours

Postuler Maintenant

Trouver des Emplois à Distance Similaires

Configurer une alerte email pour les nouveaux emplois

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Télécharger le CV

Pliant

Site WebLinkedInTous les Emplois

201 - 500 employés

Fondée en 2020

💳 Fintech

☁️ SaaS

🤝 B2B

💰 €40 000 000 Series B - Pliant en 2025-04

Fintech • SaaS • B2B

Pliant est une plateforme de cartes de crédit qui permet aux entreprises, banques et fintechs d'émettre et de gérer des cartes de crédit, d'automatiser les paiements et d'optimiser les dépenses et les flux de travail comptables. Pliant propose des applications de paiement, une API Pro pour l'émission et l'automatisation des cartes, Cards-as-a-Service (CaaS) et Banking-as-a-Service (BaaS) pour intégrer ou marquer en blanc des programmes de cartes, ainsi que des comptes globaux, des opérations de change et des transferts, du crédit et du financement, et des services de conformité et d'habilitation. Elle dessert des entreprises, e-commerce, revendeurs, sociétés SaaS, agences de voyage et de marketing, et banques avec des fonctionnalités telles que la surveillance en temps réel, le contrôle des dépenses, la gestion des reçus, les intégrations avec les systèmes comptables et de gestion des dépenses, les cartes virtuelles à usage unique et l'automatisation par API. Pliant détient une licence de monnaie électronique dans l'UE, émet des cartes au Royaume-Uni, est certifiée PCI DSS et ISO/IEC 27001, et se concentre sur l'optimisation des paiements B2B et les solutions de finance intégrée.

Description

• Integrate security best practices throughout the SDLC to protect products, infrastructure, and customer data. • Design, implement, and maintain security automation tooling to address problems at scale (e.g., patch management, vulnerability management, compliance evidence collection). • Embed security controls and guardrails into the developer platform to enable secure and efficient delivery. • Define and promote “Paved Roads” - reusable, secure development standards and Terraform/Docker modules. • Harden containerized workloads (ECS and EKS) - ensure clusters follow security best practices for isolation, networking, and access control; Maintain secure, up-to-date base images; enforce image signing and provenance; implement admission control, least-privilege IAM roles, and runtime anomaly detection. • Deploy and manage cloud security platforms (e.g., Wiz) and drive remediation workflows. • Automate collection of audit-ready evidence for frameworks like PCI DSS, ISO 27001, SOC 2, and DORA. • Support vulnerability management (triage, SLAs, RCA) and lead incident response and post-mortems. • Conduct threat modeling, architecture reviews, and provide guidance on secure design and cryptography. • Build and maintain security documentation, internal tooling, and feedback loops to strengthen security culture. • Act as a security SME across application, cloud, and compliance domains.

🎯 Exigences

• 5+ years of experience in a technical security role, preferably in a cloud-native or fintech/SaaS environment. • Strong proficiency with AWS services and security (IAM, KMS, CloudTrail, S3, GuardDuty, SCPs, etc.). • Solid understanding of DevSecOps practices and integrating security into CI/CD workflows. • Proficient in Terraform and other IaC tooling, capable of writing secure, reusable modules and enforcing guardrails. • Proficient in Python, Bash, or TypeScript – capable of scripting and building automation tools. • Experience securing containers (Docker, ECS, EKS, or Kubernetes) and implementing hardened images. • Expert level understanding of OWASP Top 10, secure coding, and software supply chain risks. • Experience managing and integrating cloud security platforms (e.g., Wiz, Orca, Lacework, Prisma Cloud). • Understanding of vulnerability management and remediation workflows at scale. • Experience with application security practices, including code review, threat modeling, static and dynamic analysis (SAST, DAST), and attack surface analysis. • Experience performing Application Penetration Testing or Vulnerability Research / Bug Bounty Hunting. (Ability to discover and identify fixes for SQLi, XSS, CSRF, SSRF, authentication and authorization flaws, and other web-based security vulnerabilities) • Experience with threat modeling or security reviews. • Excellent communication skills and empathy, security is a complex topic that you have to be able to explain to audiences of various levels of previous exposure or learning.

🏖️ Avantages

• Attractive remuneration • Your choice of preferred OS, Windows or Mac • Flat hierarchy and transparent communication in a relaxed, professional atmosphere • Opportunity to develop your talent in a dynamic team with ambitious goals • Flexibility and possibility to work remotely • Company card with a monthly allowance for lunches, coffee, etc. with co-workers