RemoteLeaf Logo
Log in Sign up

Information Security Lead

2 months, 4 weeks ago
Bulgaria
Full-time
Lead
Security Engineer
DevOps and Infrastructure
AWS CI/CD Encryption Microservices Penetration Testing Secrets Management SIEM
Apply Now
emerchantpay

emerchantpay

emerchantpay specializes in providing seamless and secure online, mobile, and in-store payment processing solutions, along with risk and fraud management services, to help merchants enhance their conversion rates and expand their customer reach globally.

Diversified Financial Services
251-1K
Founded 2002
View All Jobs 11

Description

  • Define and maintain the information security strategy, standards, and roadmap aligned with regulations and security best practices.
  • Steer security architecture for a cloud-native environment and define secure-by-design patterns for microservices, APIs, and platform services.
  • Establish and govern secure SDLC practices and embed automated security controls into CI/CD pipelines.
  • Define and drive cloud security guardrails across identity, network segmentation, encryption, secrets management, and configuration baselines.
  • Build and run security monitoring, logging, and threat detection across cloud, infrastructure, and application layers.
  • Lead the security incident response lifecycle and act as incident commander for security events.
  • Own vulnerability and threat management, including scanning, prioritization, remediation tracking, and reporting.
  • Plan and coordinate penetration testing and offensive-security exercises and drive findings to closure.
  • Govern identity and access management, privileged access, and least-privilege principles across cloud and corporate systems.
  • Secure corporate IT and office infrastructure, including endpoints, networks, and collaboration platforms.
  • Partner with Engineering and DevOps to support threat modelling, design reviews, tooling, and secure delivery practices.
  • Implement and evidence technical security controls for PCI DSS, ISO 27001, and SOC audits.
  • Run security awareness and phishing-resilience programs.
  • Build, lead, and mentor a small security team.
  • Report on security posture, key risks, and metrics.

Requirements

  • Bachelor’s or master’s degree in computer science, information security, or a related field, or equivalent practical experience.
  • At least 10 years of experience in information or cyber security, including 2-3 years in a leadership role.
  • Hands-on experience securing cloud-native environments at scale.
  • Deep public-cloud security knowledge, with AWS strongly preferred.
  • Strong experience securing DevOps / CI/CD pipelines and modern microservices architectures, including containers, APIs, and infrastructure-as-code.
  • Working knowledge of application security and secure SDLC across modern programming languages and web frameworks.
  • Hands-on experience with security operations, incident response, and vulnerability management.
  • Solid understanding of ISO 27001, PCI DSS, SOC 2, and NIST CSF.
  • Working AI security literacy, including use of AI-assisted security tooling and practical understanding of securing AI/LLM and agentic applications.
  • Excellent verbal and written communication skills, fluent English, and ability to influence engineers with data and logic.
  • Professional certification such as CISSP, CCSP, OSCP, AWS Security Specialty, or CISM is an advantage.
  • Experience in payments, fintech, banking, or another regulated environment is an advantage.
  • Familiarity with operational-resilience expectations such as DORA-style requirements is an advantage.
  • Experience standing up a security function is an advantage.

Benefits

  • Fast-growing payment company.
  • Excellent working conditions, a casual atmosphere, and state-of-the-art hardware.
  • Modern, challenging, and constantly growing business.
  • Professional development support, including books, trainings, and certifications.
  • Team buildings and fun activities.
  • 25 days of paid holiday, plus 1 additional day for every 2 years with the company.
  • Fully distributed and remote work arrangement.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Nortal

(EG0068) IAM Developer

Nortal 251-1K Internet Software & Services

Nortal is seeking an IAM Developer to design, implement, and maintain identity and access management solutions that protect digital identities, streamline access, and strengthen cybersecurity for global enterprise clients.

Latin America Full-time Mid Level Security Engineer
Cybersecurity Java .NET Node.js SAML
5 hours, 36 minutes ago
Bloomreach

Senior Security Engineer

Bloomreach 251-1K Internet Software & Services

Bloomreach is hiring a Cloud Security Engineer to secure its AWS, containerized, Linux, corporate, and identity infrastructure while partnering with the SOC to strengthen protection, vulnerability management, and incident response.

Czech Republic Full-time Senior Security Engineer
$11k-$14k
AWS Bash CI/CD Cybersecurity Docker Go Kubernetes Linux Python SIEM SOC Splunk
6 hours, 36 minutes ago
Bloomreach

Senior Security Engineer

Bloomreach 251-1K Internet Software & Services

Bloomreach is hiring a Cloud Security Engineer to secure its AWS, corporate, Linux, and containerized infrastructure while partnering with the SOC to improve vulnerability management, architecture, and security operations for its AI-powered personalization platform.

Slovakia Full-time Senior Security Engineer
$41k-$51k
AWS Bash CI/CD Docker Go Kubernetes Linux Python SIEM Splunk
6 hours, 36 minutes ago
Cision

Senior Security Engineer

Cision 5K-10K Professional Services

Cision is hiring a Senior Security Engineer to monitor, investigate, and respond to security activity across its cloud, identity, endpoint, network, and Linux environments.

Bulgaria Hungary Mid Level Security Engineer
Active Directory AWS Bash GitHub GitLab Kubernetes Linux Network Security PowerShell Python SIEM Splunk
1 day, 5 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers