onsite
Security Engineer - Product - Cardless
Security Engineer
Lead product security for a fintech platform, designing authentication, authorization, anti‑abuse, and fraud controls to protect end‑to‑end credit card services across multiple brands.
About the role
Key Responsibilities
- Architect and implement robust authentication and authorization mechanisms for the credit card platform.
- Design and enforce anti‑abuse controls and fraud detection primitives to safeguard user data and transactions.
- Collaborate with product, engineering, and compliance teams to embed security best practices into the development lifecycle.
- Conduct threat modeling, security reviews, and penetration testing to identify and remediate vulnerabilities.
- Maintain and evolve security tooling, monitoring, and incident response processes in a cloud environment.
Requirements
- 5+ years of experience in security engineering, preferably in fintech or payment systems.
- Deep knowledge of authentication protocols (OAuth, OpenID Connect), authorization frameworks, and API security.
- Hands‑on experience with anti‑abuse and fraud detection strategies, including behavioral analytics.
- Proficiency with cloud security (AWS, Azure, or GCP) and DevSecOps practices.
- Strong communication skills and ability to influence cross‑functional teams.
Skills
pythonjavaawsapache sparkiam