Lead, Information Security
Core
Lead and shape the information security function across strategic and technical domains for a FinTech platform.
Role type
Senior IC/Lead Information Security Engineer
Builds
Cloud security, security architecture, application security, vulnerability management, threat detection, and incident response programs.
Domain
FinTech / Cybersecurity
Required skills
Cloud security, Security architecture, VAPT, AppSec/DevSecOps, Defensive security, GCP/AWS, IAM, CSPM, SIEM, EDR/XDR, Vulnerability management, Penetration testing, Red/purple teaming, Threat hunting, Incident response, SAST/DAST/SCA, Container security, Security architecture, Threat modelling, Enterprise security controls, Regulated FinTech experience
Preferred skills
CISSP/CISM, OSCP
Technologies
GCP, AWS, SIEM, EDR/XDR, SAST, DAST, SCA
Responsibilities
Lead and contribute hands-on to security architecture and technical security reviews across cloud, infrastructure and product initiatives; Design and implement security controls across GCP and AWS, including IAM, CSPM and cloud-native security; Drive and contribute to Secure SDLC / DevSecOps, including SAST, DAST, SCA and container security; Lead vulnerability management and actively participate in penetration testing, VAPT and red/purple team engagements; Design and improve threat detection, SIEM use cases and security monitoring; Lead and participate in complex security incident investigations and response; Drive endpoint, infrastructure, network and firewall security initiatives; Automate security processes and develop security tooling where needed; Establish technical standards, security best practices and operating procedures; Support and mentor a team of security engineers and analysts; Work closely with Engineering, Infrastructure, Product, IT, Legal and Compliance teams to embed security across Tabby.
Seniority
Senior, hands-on IC with leadership responsibilities