[Hiring] Senior Security Engineer @Seon

Role Description

We are looking for a Senior Security Engineer to help secure our real-time fraud-prevention platform. It runs on multi-region AWS, Kubernetes, Terraform and GitHub, and serves highly regulated clients worldwide. You will be a hands-on generalist with real depth in cloud and infrastructure security. You'll work with our application security and platform security engineers on identity and access, detection and response, infrastructure guardrails and security reviews.

You will also lead our security assurance programme: ISO 27001, ISO 42001, SOC 2, PCI DSS, and the customer due diligence that regulated clients expect. We want it to run the way an engineer would run it. Pipelines collect the evidence, reviews are automated, and we answer questionnaires from maintained material with AI-assisted drafting.

At SEON, we believe great engineers come from many backgrounds. If you are a security engineer who has run a certification programme and knows how much of it can be automated, we encourage you to apply, even if you don't meet every single requirement listed below.

Qualifications

• 5+ years in security engineering with hands-on AWS experience: IAM, CloudTrail, GuardDuty, Security Hub, WAF, and the ability to investigate an incident from the logs up.
• Working fluency in Terraform, Kubernetes and GitHub Actions.
• Python or a similar language for automating evidence collection, access reviews and alert enrichment.
• Experience leading ISO 27001 or SOC 2 as the primary contact for the auditor.
• Experience with customer security questionnaires and vendor security reviews.
• Clear, concise written English for auditors, engineers and customers.
• You make decisions, prioritise against a roadmap, and ask for help early.

Requirements

• Build evidence pipelines against AWS, GitHub, CI/CD and identity tooling so controls are verified by code rather than by hand, and choose and run compliance automation tools.
• Automate access reviews across AWS IAM, Google Workspace, GitHub and core SaaS tools, and build self-service paths for routine access requests together with the Platform and IT teams.
• Harden and remediate IAM at scale: unused roles, excessive permissions, long-lived credentials, root and break-glass access.
• Ship Terraform and CI guardrails: secret scanning on code and state, policy checks on plan, signed container images, enforced baselines on new accounts and clusters.
• Take part in the team's on-call and triage rotation: investigate alerts from GuardDuty, Security Hub, WAF and Kubernetes, handle vulnerability and bug bounty reports, and contain and close incidents.
• Write and tune detections across CloudTrail, GuardDuty, WAF and Kubernetes signals, and contribute to cross-signal correlation and AI-assisted triage.
• Validate pentest and vulnerability remediations, review infrastructure and IAM changes, and contribute to threat models of new services and AI features.
• Lead our ISO 27001, ISO 42001, SOC 2 and PCI DSS programmes: a single control framework mapped across standards, scoping, gap analysis, auditor liaison, remediation tracking and surveillance cycles.
• Own customer security questionnaires and vendor security reviews, maintain our trust material, and develop our AI-assisted questionnaire tooling.
• Keep policies and the risk register current and readable, and translate upcoming obligations (DORA, EU AI Act, regional financial regulators) into concrete engineering work.

Benefits

• Opportunity to work with a fast-growing company.
• Engagement with some of the world’s most ambitious digital brands.

Company Description

SEON is the command center for fraud prevention and AML compliance, helping thousands of companies worldwide stop fraud, reduce risk and protect revenue. Powered by 900+ real-time, first-party data signals, SEON enriches customer profiles, flags suspicious behavior and streamlines compliance workflows - all from one place.

We’ve helped companies reduce fraud by 95% and achieve 32x ROI, and we’re growing fast, thanks to our partnerships with some of the world’s most ambitious digital brands like Revolut, Wise, and Bilt.