Senior Security Engineer

SEON is the command center for fraud prevention and AML compliance, helping thousands of companies worldwide stop fraud, reduce risk and protect revenue. Powered by 900+ real-time, first-party data signals, SEON enriches customer profiles, flags suspicious behavior and streamlines compliance workflows - all from one place. SEON provides richer data, more flexible and transparent analysis, and faster time to value than any other provider on the market. We’ve helped companies reduce fraud by 95% and achieve 32x ROI, and we’re growing fast, thanks to our partnerships with some of the world’s most ambitious digital brands like Revolut, Wise, and Bilt.

We are looking for a Senior Security Engineer to help secure our real-time fraud-prevention platform. It runs on multi-region AWS, Kubernetes, Terraform and GitHub, and serves highly regulated clients worldwide. You will be a hands-on generalist with real depth in cloud and infrastructure security. You'll work with our application security and platform security engineers on identity and access, detection and response, infrastructure guardrails and security reviews.

You will also lead our security assurance programme: ISO 27001, ISO 42001, SOC 2, PCI DSS, and the customer due diligence that regulated clients expect. We want it to run the way an engineer would run it. Pipelines collect the evidence, reviews are automated, and we answer questionnaires from maintained material with AI-assisted drafting. At SEON, we believe great engineers come from many backgrounds. If you are a security engineer who has run a certification programme and knows how much of it can be automated, we encourage you to apply, even if you don't meet every single requirement listed below.

WHAT YOU’LL DO

• Build evidence pipelines against AWS, GitHub, CI/CD and identity tooling so controls are verified by code rather than by hand, and choose and run compliance automation tools.
• Automate access reviews across AWS IAM, Google Workspace, GitHub and core SaaS tools, and build self-service paths for routine access requests together with the Platform and IT teams.
• Harden and remediate IAM at scale: unused roles, excessive permissions, long-lived credentials, root and break-glass access. Move us towards short-lived, scoped identities with a named owner, for humans, workloads and AI agents.
• Ship Terraform and CI guardrails: secret scanning on code and state, policy checks on plan, signed container images, enforced baselines on new accounts and clusters.
• Take part in the team's on-call and triage rotation: investigate alerts from GuardDuty, Security Hub, WAF and Kubernetes, handle vulnerability and bug bounty reports, and contain and close incidents.
• Write and tune detections across CloudTrail, GuardDuty, WAF and Kubernetes signals, and contribute to cross-signal correlation and AI-assisted triage.
• Validate pentest and vulnerability remediations, review infrastructure and IAM changes, and contribute to threat models of new services and AI features.
• Lead our ISO 27001, ISO 42001, SOC 2 and PCI DSS programmes: a single control framework mapped across standards, scoping, gap analysis, auditor liaison, remediation tracking and surveillance cycles.
• Own customer security questionnaires and vendor security reviews, maintain our trust material, and develop our AI-assisted questionnaire tooling.
• Keep policies and the risk register current and readable, and translate upcoming obligations (DORA, EU AI Act, regional financial regulators) into concrete engineering work.

WHAT YOU’LL BRING

• 5+ years in security engineering with hands-on AWS experience: IAM, CloudTrail, GuardDuty, Security Hub, WAF, and the ability to investigate an incident from the logs up.
• Working fluency in Terraform, Kubernetes and GitHub Actions. You can read a module or a workflow and tell whether it does what the policy says.
• Python or a similar language for automating evidence collection, access reviews and alert enrichment, and comfort working with APIs and CI pipelines.
• Experience leading ISO 27001 or SOC 2 as the primary contact for the auditor.
• Experience with customer security questionnaires and vendor security reviews.
• Clear, concise written English for auditors, engineers and customers.
• You make decisions, prioritise against a roadmap, and ask for help early.

AMAZING IF YOU ALSO HAVE

●ISO 42001 or AI governance experience; PCI DSS as a service provider; DORA or financial-sector regulatory exposure; detection engineering or incident response background; Kyverno, Linkerd or EKS security tooling.

SEON Technologies collects and processes personal data in accordance with applicable data protection laws. If you are a European Job Applicant see the privacy notice for further details.

SEON is an equal opportunity employer. We strive to embrace what makes each one of us unique; we each have our own story. Whether looking at our current staff or future team members, we believe that everyone has something to contribute, and our employment practices reflect that. We do not make an employment decision based upon race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws. Please let your recruiter know if you need reasonable adjustments to our recruitment process.

Where you can be based

This position is 100% remote and open to applicants based in these 49 countries: Andorra, Albania, Austria, Åland Islands, Bosnia and Herzegovina, Belgium, Bulgaria, Switzerland, Cyprus, Czechia, Germany, Denmark, Estonia, Spain, Finland, Faroe Islands, France, United Kingdom, Guernsey, Gibraltar, Greece, Croatia, Hungary, Ireland, Isle of Man, Iceland, Italy, Jersey, Liechtenstein, Lithuania, Luxembourg, Latvia, Monaco, Moldova, Montenegro, North Macedonia, Malta, Netherlands, Norway, Poland, Portugal, Romania, Serbia, Sweden, Slovenia, Slovakia, San Marino, Ukraine and Vatican City.