Security Engineer – Build SecOps & PenTesting at Fast‑Growing FinTech

About the role

Coinflow is looking for a Security Engineer to own both defensive and offensive security across its global payments platform. You will build the SecOps backbone, hunt for vulnerabilities before they are exploited, and partner with engineering to keep the software development lifecycle fast and secure.

Key responsibilities

• Stand up and operate a SIEM platform and create a real‑time SecOps dashboard for engineering, compliance, and leadership.
• Run continuous internal penetration tests on services, APIs, infrastructure, and SDKs, leveraging Claude Security and Claude Code for automation.
• Manage the full vulnerability lifecycle: triage CVEs, automate patching for npm, Cargo, and other ecosystems, and ensure safe, low‑risk upgrades.
• Define and enforce secure‑by‑default patterns, review threat models, and integrate SAST, DAST, and secret‑scanning into CI pipelines.
• Collaborate with the compliance team to produce PCI‑DSS, SOC 2, and ISO evidence and monitoring artifacts.

Required profile

• Hands‑on experience with modern security tooling and a passion for automating security operations.
• Ability to work independently while partnering closely with engineering and compliance stakeholders.
• Strong analytical mindset for threat hunting, vulnerability assessment, and remediation tracking.

Required skills

• SIEM implementation and operation
• SecOps dashboard creation
• Internal penetration testing (API, infrastructure, SDK)
• Claude Security and Claude Code (AI‑native security tools)
• Vulnerability management for npm, Cargo, Dependabot
• SAST, DAST, secret scanning integration in CI/CD
• Threat modeling and secure development lifecycle practices