Staff infrastructure engineer building Mercury’s fintech services platform, service ecosystem, and Kubernetes deployment standards. Improving observability, operational safety, and scalable infrastructure adoption across engineering teams.
EB
Lead Security Engineer – Cyber Platform Engineering
Posted 7 months ago
About the role
- Lead Security Engineer managing web and application security for Cyber Platform Engineering at fintech. Collaborating with teams to enhance digital platform security and protect against threats.
Responsibilities
- Own and lead the organization’s web security platform and its protection capabilities.
- Implement and tune web security controls to reduce risk while maintaining performance.
- Maintain platform standards, baselines, governance, and documentation.
- Guide teams on secure onboarding of services (routing, encryption, headers, policies).
- Strengthen protections against common web/API threats and automated abuse.
- Support DDoS readiness through runbooks and exercises.
- Support security requirements for cloud migrations and platform changes.
- Use logging/telemetry tools to investigate issues and support threat analysis.
- Contribute to secure network architecture (segmentation, ingress/egress, connectivity).
- Provide direction on firewall and network protections and rule base reviews.
- Hands-on leadership and mentorship to more junior employees.
- Advance web/API protection and detection maturity and resilience.
- Improve cloud and container security posture through best practice hardening via CSPM.
- Enhance DDoS readiness and operational preparedness.
- Develop reusable, secure engineering patterns for cross team adoption.
- Partner with application engineering, cloud platform teams, network/security architecture, and security operations to deliver unified security outcomes.
- Participate in incident response and drive follow-up improvements.
- Collaborate with domain SMEs across network, endpoint, cloud, and email security to maintain cohesive, enterprise wide protection.
- Mentor and guide engineers to embrace secure engineering practices.
- Regularly contribute to security documentation and platform standards, collaborating with team members to maintain accurate, high quality technical artifacts and ensure consistent understanding across teams.
Requirements
- Proven, hands‑on experience with CDN, WAF, and API protection technologies.
- Strong command of web protection concepts and implementation, including DDoS protection and bot defense.
- Extensive experience in security engineering with strong focus on web and application security within enterprise environments.
- Demonstrated ability to operate as a hands‑on technical lead with end‑to‑end ownership of platform outcomes, prioritization, and cross‑team delivery.
- Strong understanding of network security architecture and common web/cloud attack vectors, with ability to translate threat patterns into practical controls.
- Deep experience with at least one major cloud service provider.
- Working knowledge of container orchestration and container security.
- Solid background in firewall and network security: NGFW, IDS/IPS, etc.
- Experience conducting firewall rule‑base reviews (manual and automated).
- Familiarity with cloud‑delivered network protection models, including secure web gateways and Zero Trust Network Access.
- Experience with email security and threat‑detection tooling, including behavioral analysis and phishing/malware protection.
- Strong understanding of PKI, TLS, certificate lifecycle management, and trust‑model design.
- Excellent communication skills, able to explain complex technical issues clearly to technical and non‑technical audiences.
Job title
Job type
Experience level
Salary
Not specified
Degree requirement
Tech skills
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
Platform Engineer building reliable, secure AWS infrastructure for Resend’s developer email platform. Improving observability, automation, and self - service tooling for engineering teams.
Platform Engineer building scalable AWS infrastructure, automation, and observability for Resend’s modern email platform. Improving reliability and developer tooling for teams worldwide.
Platform Engineering Manager leading WCG’s Azure - focused cloud platform, DevSecOps, infrastructure automation, and integrations. Enabling secure, scalable digital employment services across Canada.
Backend Platform Engineer scaling Hapiko’s real - time APIs, queues, infrastructure and observability. Building reliable, secure cloud systems for Spin Master’s voice - activated kids’ sticker printer.
Azure Platform Engineer operating secure, reliable AKS infrastructure for Smile Digital Health’s FHIR - based healthcare data platform. Owning Kubernetes networking, CI/CD, observability, security, and production operations.
Senior Platform Engineer building scalable backend and cloud infrastructure for ExaCare’s AI - powered post - acute care platform. Improving reliability, developer velocity, and healthcare admission workflows.
Principal Platform Engineer leading SkyWatch’s satellite - data platform and AI agent infrastructure. Owning architecture, customer - driven roadmap delivery, and platform engineering leadership.
Platform Engineer securing Just Eat Takeaway.com’s global food - delivery edge infrastructure. Building gateways, automation, and resilient traffic routing across production environments.
Director leading Blackpoint Cyber’s cloud - based Unified Security Posture data platform for cybersecurity solutions. Driving platform roadmap, reliability, APIs, data engineering, and team growth.