NMI

NMI

NMI provides an embedded online payments platform that integrates secure and customizable payment solutions, enabling businesses to streamline transactions and enhance customer experiences across various payment methods.

Diversified Financial Services
251-1K
Founded 1999
$1M raised

Description

  • Define and evolve security architecture across AWS and colocation infrastructure.
  • Establish secure reference architectures, engineering standards, and reusable control patterns.
  • Provide technical leadership for major infrastructure, platform, and product initiatives.
  • Design and improve controls for identity, networks, encryption, secrets, logging, monitoring, and workload protection.
  • Develop preventative guardrails using infrastructure-as-code, policy-as-code, automation, and cloud-native security services.
  • Partner early with Engineering and Product on new products, platforms, services, and integrations.
  • Lead threat modelling, security architecture reviews, and technical risk assessments.
  • Design and implement security tooling, integrations, and automated controls.
  • Embed security capabilities into infrastructure provisioning, engineering workflows, and CI/CD pipelines.
  • Lead vulnerability and exposure management, incident escalation, and post-incident improvements.

Requirements

  • Significant experience in security engineering, infrastructure security, cloud security, security architecture, or platform engineering.
  • Deep, hands-on experience securing AWS environments.
  • Strong knowledge of AWS IAM, network architecture, account governance, encryption, logging, monitoring, secrets management, and workload protection.
  • Experience designing or securing on-premises, data-centre, or colocation-hosted infrastructure.
  • Strong knowledge of enterprise networking, segmentation, firewalls, secure remote access, privileged administration, and hybrid connectivity.
  • Experience with infrastructure-as-code, CI/CD security, containerised environments, and cloud-native platforms.
  • Demonstrated experience designing and implementing automated security controls and engineering solutions.
  • Proficiency with scripting or software development using Python, Go, or a comparable language.
  • Practical experience using AI-assisted tooling to improve security engineering and operational workflows.
  • Experience leading complex initiatives across multiple engineering, infrastructure, or product teams.
  • Strong knowledge of threat modelling, vulnerability management, detection, and incident response.
  • Advanced AWS certification in security, architecture, networking, or cloud engineering (desirable).
  • Experience in fintech, payments, SaaS, or another regulated technology environment (desirable).
  • Experience securing large or complex AWS multi-account estates (desirable).
  • Experience with Kubernetes, container security, software supply-chain security, and policy-as-code (desirable).
  • Experience with CNAPP, CSPM, SIEM, EDR, DLP, WAF, vulnerability-management, network-security, or secrets-management platforms (desirable).
  • Familiarity with PCI DSS, SOC 2, GDPR, NIST, or ISO 27001 (desirable).
  • Experience supporting significant security incidents, penetration tests, audits, or customer security assessments (desirable).

Benefits

  • Competitive salary of $145,000-$165,000 USD depending on experience, plus bonus.
  • Remote-first culture.
  • Flexible PTO.
  • Health, dental, and vision insurance.
  • 13 paid holidays.
  • Company volunteer days.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Security Engineer

Chainguard 51-250 Internet Software & Services

Chainguard is hiring a Security Engineer for its Cyber Resiliency team to strengthen company-wide information security, support compliance, and enable low-friction protection against cyber threats.

Go Linux macOS Python Shell Scripting
1 day, 18 hours ago

Security Engineer

GXA 11-50 Internet Software & Services

GXA is hiring a hands-on Security Engineer to operate and improve its gShield security services, support client environments, and lead technical incident response and remediation.

Active Directory AWS Azure Cybersecurity DHCP DNS PowerShell SIEM TCP/IP Windows Server
1 day, 18 hours ago

Senior Detection Engineer

DoorDash 10K-50K Air Freight & Logistics

DoorDash is hiring a Senior Detection Engineer to help build and operate detection engineering for its global cyber defense function across DoorDash, Deliveroo, and Wolt.

Go Python SIEM Snowflake SQL
3 days, 17 hours ago

Staff Security Engineer

Redox 51-250 Internet Software & Services

Redox is hiring a Staff Security Engineer to own cloud-native and application security for its remote healthcare data exchange platform, with a focus on hardening systems and driving secure-by-default engineering practices.

Argo CD AWS CI/CD CrowdStrike Docker GitHub Actions Go HashiCorp Vault Helm Kafka Kubernetes LLM Node.js PostgreSQL Python Redis Terraform TypeScript
3 days, 17 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers