Senior Security Engineer

ZEPZ TECHNOLOGY SERVICES LIMITED
UK
17 days ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Expert
Working hours
Regular working hours
Job source

Tech stack

Application Programming Interfaces (APIs) User Authentication Cloud Computing Cyber Security Phishing Red Team (Cyber Security) Security Information and Event Management Software Vulnerability Management Cloudformation Infrastructure Automation Frameworks Purple Team (Cyber Security) Terraform

Job description

We look for mission-driven builders who thrive in a fast-paced environment connected to a true purpose. We’re an always developing team of experts that enjoy problem solving and bring clarity to tough challenges. At Zepz, we are Relentless Learners , always seeking feedback, and Responsible Owners , treating company resources like your own. We depend on Transparent Communicators who keep the team aligned through open, honest talk. Our Core Commitments - What We Live By

Our vibrant and truly diverse culture is built on three core commitments, that guide how we work and interact:

  • Integrity: We always do the right thing. It’s simple, but it’s the foundation of everything we build for our customers and each other.
  • Outcomes: We work for our customers. Their success and prosperity are the results we focus on delivering.
  • Velocity: We are fast! We maintain high energy levels and make smart decisions quickly, keeping us nimble and ahead of the curve.

Perks of Joining Our Team

We believe in empowering colleagues because we genuinely trust our team. Our culture is founded on this high trust, which naturally encourages the high ownership that drives us to meet our shared high expectations and deliver high performance Our remote-first culture means you have the flexibility to work in your employing country wherever you feel the most focused and productive. This freedom comes with wonderful tailored, location-specific perks designed to support your whole life, not just your work. Think unlimited annual leave , great healthcare benefits, and employee discounts. We want you to thrive and focus entirely on making your biggest impact! In turn, we expect you to bring high ownership and commitment to your work. This is a place where we value trust and high performance, and we’ll provide the environment and support needed for you to excel

About the role and team

As we scale our security function to support our two payment brands and future acquisitions we need to ensure security operations are set up to scale.

We are looking for a person with expertise in incident response and vulnerability management who is interested in automation to help scale security operations and take the capability to the next level. We have a close knit highly competent team who you’ll be joining, working alongside them to run phishing campaigns, manage security incidents through our SIEM and contribute to purple team exercises alongside our internal red team capability. What you will own:

  • Respond to security incidents in a timely and effective manner.
  • Investigate security incidents to identify root causes and prevent future incidents.
  • Communicate with stakeholders throughout the incident response process.
  • Create run books for common scenarios to improve consistency and prepare for automation
  • Review tooling and processes and automate wherever possible leaning on the ability of the SIEM to integrate to 3rd party APIs and follow workflow to enrich data as well as automatically close some incidents.
  • Manage threat and vulnerability management
  • Keep abreast of emerging threats & vulnerabilities
  • Own the vulnerability reporting services and manage vulnerability team remediation metrics building relationships and influencing remediation outcomes through robust processes including reporting and risk management.
  • Improve stakeholder collaboration & influence
  • Partner with engineering, operations, and business teams to foster a security-first culture.
  • Improve security education and awareness campaigns by leading multi disciplinary and multi media messaging campaigns.
  • Strive for continuous improvement
  • Stay updated with the latest developments in security operations and incident response.

Requirements

  • Good security fundamentals e.g. networking, authentication, operating systems, cloud, encryption.
  • Experience responding to incidents including EuC, public cloud server infrastructure and containerised environments.
  • Experience of scripting and automation.
  • Experience with SIEM and EDR tools.
  • Familiarity with Infrastructure as Code tools (e.g., Terraform, CloudFormation).
  • Familiarity with cyber security frameworks e.g. NIST

Benefits & conditions

Pulled from the full job description

  • Annual leave
  • Employee discount

About the company

At Zepz, we’re all about breaking down barriers for our customers and our teammates. Our purpose is deeply personal, we provide a lifeline and deliver opportunities to cross-border communities that need it most through cutting edge finance and tech. Zepz is the power behind WorldRemit and Sendwave , driven by the mission to celebrate the incredible impact migrants have, both at home and abroad. We’re not just moving money; we’re building a world that truly recognizes and supports global connections.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on uk.indeed.com

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

1:53 min

Transitioning toward DevSecOps with dynamic scanning and secrets management

Christoph Ruggenthaler · LIVE

1:29 min

Evaluating phishing emails that leverage artificial time constraints

Mauro Verderosa · LIVE

1:34 min

Essential commands for running and testing Terraform configurations

Hennie Francis · LIVE

4:11 min

Introduction to cloud-native application developer security

Micah Silverman · WWC 2022

3:22 min

Transitioning from software engineering to security roles

Anna Oliveira · Coffee With Developers

2:39 min

Exposing stored XSS and phishing attacks via markdown

Ramona Schwering Ramona Schwering · WWC Europe 2026

Videos

See all

Related articles

See all