RemoteLeaf Logo
Log in Sign up

Information Security Lead

1 month, 2 weeks ago
Bulgaria
Full-time
Lead
Security Engineer
DevOps and Infrastructure
AWS CI/CD Encryption Microservices Penetration Testing Secrets Management SIEM
Apply Now
emerchantpay

emerchantpay

emerchantpay specializes in providing seamless and secure online, mobile, and in-store payment processing solutions, along with risk and fraud management services, to help merchants enhance their conversion rates and expand their customer reach globally.

Diversified Financial Services
251-1K
Founded 2002
View All Jobs 12

Description

  • Define and maintain the information security strategy, standards, and roadmap aligned with regulations and security best practices.
  • Steer security architecture for a cloud-native environment and define secure-by-design patterns for microservices, APIs, and platform services.
  • Establish and govern secure SDLC practices and embed automated security controls into CI/CD pipelines.
  • Define and drive cloud security guardrails across identity, network segmentation, encryption, secrets management, and configuration baselines.
  • Build and run security monitoring, logging, and threat detection across cloud, infrastructure, and application layers.
  • Lead the security incident response lifecycle and act as incident commander for security events.
  • Own vulnerability and threat management, including scanning, prioritization, remediation tracking, and reporting.
  • Plan and coordinate penetration testing and offensive-security exercises and drive findings to closure.
  • Govern identity and access management, privileged access, and least-privilege principles across cloud and corporate systems.
  • Secure corporate IT and office infrastructure, including endpoints, networks, and collaboration platforms.
  • Partner with Engineering and DevOps to support threat modelling, design reviews, tooling, and secure delivery practices.
  • Implement and evidence technical security controls for PCI DSS, ISO 27001, and SOC audits.
  • Run security awareness and phishing-resilience programs.
  • Build, lead, and mentor a small security team.
  • Report on security posture, key risks, and metrics.

Requirements

  • Bachelor’s or master’s degree in computer science, information security, or a related field, or equivalent practical experience.
  • At least 10 years of experience in information or cyber security, including 2-3 years in a leadership role.
  • Hands-on experience securing cloud-native environments at scale.
  • Deep public-cloud security knowledge, with AWS strongly preferred.
  • Strong experience securing DevOps / CI/CD pipelines and modern microservices architectures, including containers, APIs, and infrastructure-as-code.
  • Working knowledge of application security and secure SDLC across modern programming languages and web frameworks.
  • Hands-on experience with security operations, incident response, and vulnerability management.
  • Solid understanding of ISO 27001, PCI DSS, SOC 2, and NIST CSF.
  • Working AI security literacy, including use of AI-assisted security tooling and practical understanding of securing AI/LLM and agentic applications.
  • Excellent verbal and written communication skills, fluent English, and ability to influence engineers with data and logic.
  • Professional certification such as CISSP, CCSP, OSCP, AWS Security Specialty, or CISM is an advantage.
  • Experience in payments, fintech, banking, or another regulated environment is an advantage.
  • Familiarity with operational-resilience expectations such as DORA-style requirements is an advantage.
  • Experience standing up a security function is an advantage.

Benefits

  • Fast-growing payment company.
  • Excellent working conditions, a casual atmosphere, and state-of-the-art hardware.
  • Modern, challenging, and constantly growing business.
  • Professional development support, including books, trainings, and certifications.
  • Team buildings and fun activities.
  • 25 days of paid holiday, plus 1 additional day for every 2 years with the company.
  • Fully distributed and remote work arrangement.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Myriad360

Managed Services Networking & Security Enterprise Services Architect

Myriad360 51-250 Internet Software & Services

Myriad360 is hiring a U.S.-based remote Managed Services Enterprise Architect to build and run its Networking & Security managed service, bridging strategic architecture with day-to-day service delivery.

United States Full-time Senior Network Engineer Security Engineer
$140k-$240k
AWS Azure GCP Palo Alto Splunk TCP/IP
5 hours, 52 minutes ago
LivePerson

SecOps Engineer I

LivePerson 1K-5K Internet Software & Services

LivePerson is hiring a SecOps/IT operations security professional to support and improve the security, monitoring, and reliability of its cloud and infrastructure environment.

Bulgaria Full-time Junior Security Engineer
Active Directory Cybersecurity Elasticsearch Go Linux macOS Python
6 hours, 7 minutes ago
Zscaler

Senior Threat Response Engineer

Zscaler 1K-5K Internet Software & Services

Zscaler is hiring a Senior Threat Response Engineer to remotely respond to confirmed endpoint compromises for its Active Remediation MDR service within the Security Services team.

United States Full-time Senior Security Engineer
$122k-$175k
CrowdStrike Cybersecurity macOS
6 hours, 22 minutes ago
DYOPATH

Director, Cybersecurity Operations and Platform Delivery

DYOPATH 251-1K Internet Software & Services

DYOPATH is hiring a Director of Cybersecurity Operations & Platform Delivery to lead security operations, shape service strategy, and advise clients and executives in a remote, business-facing leadership role.

Anywhere Full-time Executive Operations Manager Security Engineer
$150k-$175k
Cybersecurity
6 hours, 22 minutes ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers