Principal Security Engineer
Tazapay is a global payments company providing cross-border money movement.
Funding history
Investors
Projects
About Tazapay
Tazapay provides regulated global payment infrastructure for businesses operating across borders. Its unified platform supports payment acceptance, stablecoin-to-fiat conversion, multi-currency business accounts, treasury and FX management, local payment methods, hosted checkout, payment links, API integrations, and payouts in more than 100 currencies. The company also offers white-label collection and payout services for platforms, along with buyer protection, compliance, risk management, and fraud protection. Its stated customers include fintechs, Web3 platforms, marketplaces, travel companies, online gaming businesses, SaaS platforms, and digital-product providers.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will drive security architecture, engineering and automation across cloud infrastructure and product engineering. You will shape API security strategy, design IAM and Zero Trust architectures, build security automation in CI/CD, run vulnerability management and incident response, manage vendors and budgets, mentor engineers and lead compliance efforts for PCI-DSS, ISO 27001 and SOC.
Requirements
- Progressive experience as a security architect, product security engineer or full-stack software engineer in cloud-native environments
- Software engineering fundamentals, preferably Golang or Java
- Knowledge of AWS, GCP or Azure security
- Understanding of CI/CD and DevOps practices
- Understanding of web applications, data and microservice architecture, REST and GraphQL API security
- Knowledge of OWASP Top 10, Secure SDLC and threat modeling
- Hands-on IAM experience with SAML, OAuth 2.0, OpenID Connect, LDAP and Kerberos
- Excellent written and verbal communication
- Experience coaching security engineers
- Experience with Agile, JIRA and Confluence
Responsibilities
- Contribute to Architecture Review with security guidance
- Author RFCs, ADRs and implementation guides
- Own API security, privacy and governance strategy
- Design enterprise IAM architecture using SAML, OAuth 2.0, OpenID Connect, LDAP and Kerberos
- Own threat modeling across the SDLC
- Design Zero Trust architecture across multi-cloud
- Build developer-first security automation
- Embed SAST, SCA, secrets, container and IaC checks into CI/CD pipelines
- Own security tooling and edge monitoring including WAF, API gateway and DDoS controls
- Lead detection engineering
- Own vulnerability management program
- Govern secrets, key management and PKI
- Own software supply chain security including SBOM
- Manage security budget and MSSP vendors
- Define incident response playbooks and lead post-incident reviews
- Track security KPIs and report to leadership
- Automate compliance reporting and audit workflows
- Mentor security engineers and build developer security awareness
- Lead audits for ISO 27001, SOC 1/2 and PCI-DSS and customer security evaluations