Principal Security Engineer

at  mx51

Principal Security Engineer
mx51 is a payments-as-a-service solution for banks, non-bank acquirers, and other merchant service providers. We are building a payment platform that allows merchants to accept payments in-store, in-app and online, whilst consolidating all their data on a real-time business management dashboard.
We’re a bank grade scale-up which means we take security seriously and are able to get stuff done. We’re looking for a new Principal Security Engineer to join us and do exactly that - taking our cyber security posture to the next level!

WHAT WE’RE LOOKING FOR IN AN APPLICANT

• Experience in multiple security disciplines such as application security, security architecture and DevSecOps.
• Capability to assess the security of web and mobile applications built on cloud platforms, such as AWS.
• Direct experience as a practitioner of penetration testing and/or secure code review.
• Experience of engaging with stakeholders such as product managers and engineering peers to collectively uplift security.
• Ability to reason about security considerations and offer practical recommendations to assist peers in taking action to address software security risks.
• Familiarity with a range of programming languages. Go, JavaScript / TypeScript and/or Kotlin preferred.
• Relevant certifications (e.g. OSCP, CREST or AWS).
  We know this sounds like a lot! If you have experience in most but not all of these domains, we’d still love to hear from you. If you’re a seasoned software developer or solution architect with a background adjacent to security and are interested in transitioning to a full-time security role, we welcome your application!
  For us, culture is the most important. As an organisation we’re growing and maturing so we’re looking for a Principal Security Engineer that can grow and mature with us.

ABOUT THE ROLE

In this role, you will be instrumental in securing the products and services we provide to our customers. For all aspects pertaining to application security, product security architecture and DevSecOps, you will be a trusted SME and lead security representative when collaborating with peers across the organisation.
We’re seeking someone who can influence and empower product and engineering teams to security best practice without impeding innovation and speed of software delivery. In addition to technical expertise, you’ll demonstrate the nous and soft skills essential for achieving security objectives while respecting varied perspectives and aligning with other business priorities.

SOME OF THE RESPONSIBILITIES OF THE ROLE INCLUDE

• Act as a trusted advisor to support peers with software design and development decisions that have security implications.
• Review new products and features to ensure adherence to security best practice prior to production release.
• Perform rigorous security assessments on mx51 products and system architecture to identify and help remediate potential vulnerabilities.
• Enhance and govern automated security checks (e.g. SAST, SCA and secret scanning) in Source Control Management (SCM) and CI/CD systems.
• Facilitate regular security assurance activities e.g. penetration testing.