Senior Security Engineer

We look for mission-driven builders who thrive in a fast-paced environment connected to a true purpose. We’re an always developing team of experts that enjoy problem solving and bring clarity to tough challenges. At Zepz, we are Relentless Learners, always seeking feedback, and  Responsible Owners, treating company resources like your own. We depend on Transparent Communicators who keep the team aligned through open, honest talk.

• Integrity: We always do the right thing. It’s simple, but it’s the foundation of everything we build for our customers and each other.
• Outcomes: We work for our customers. Their success and prosperity are the results we focus on delivering.
• Velocity: We are fast! We maintain high energy levels and make smart decisions quickly, keeping us nimble and ahead of the curve.

About the role and team

As we scale our security function to support our two payment brands and future acquisitions we need to ensure security operations are set up to scale.

We are looking for a person with expertise in incident response and vulnerability management who is interested in automation to help scale security operations and take the capability to the next level. We have a close knit highly competent team who you’ll be joining, working alongside them to run phishing campaigns, manage security incidents through our SIEM and contribute to purple team exercises alongside our internal red team capability.

• Respond to security incidents in a timely and effective manner.

• Investigate security incidents to identify root causes and prevent future incidents.

• Communicate with stakeholders throughout the incident response process.

• Create run books for common scenarios to improve consistency and prepare for automation

• Review tooling and processes and automate wherever possible leaning on the ability of the SIEM to integrate to 3rd party APIs and follow workflow to enrich data as well as automatically close some incidents.

• Manage threat and vulnerability management

• Keep abreast of emerging threats & vulnerabilities

• Own the vulnerability reporting services and manage vulnerability team remediation metrics building relationships and influencing remediation outcomes through robust processes including reporting and risk management.

• Improve stakeholder collaboration & influence

• Partner with engineering, operations, and business teams to foster a security-first culture.

• Improve security education and awareness campaigns by leading multi disciplinary and multi media messaging campaigns.

• Strive for continuous improvement

• Stay updated with the latest developments in security operations and incident response.

Technical skills:

• Good security fundamentals e.g.  networking, authentication, operating systems, cloud, encryption.

• Experience responding to incidents including EuC, public cloud server infrastructure and containerised environments.

• Experience of scripting and automation.

• Experience with SIEM and EDR tools.

• Familiarity with Infrastructure as Code tools (e.g., Terraform, CloudFormation).

• Familiarity with cyber security frameworks e.g. NIST

Our global team of 800+ people is spread across six continents. We aspire to hire the best mix of people from former Olympians to YouTube influencers and we speak over twenty languages. This incredible diversity isn't a bonus; it's the engine that lets us serve the world.