Security Engineer
LemFi provides international payment products for immigrants, including multi-currency wallets, global money transfers, payment requests, and eSIM connectivity.
About LemFi
LemFi is a financial technology company offering international payment products designed to help immigrants thrive financially. Its services include multi-currency wallets, international money transfers to more than 30 countries, money requests and payment links, and eSIM connectivity. Transfers can be sent to bank accounts, mobile money, and other destinations, typically arriving within minutes.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
This role sits at the intersection of security engineering, security operations, and compliance. It focuses on threat response, DLP and identity controls, vulnerability management, audit requirements, compliance automation, and security programme operations.
Requirements
- 2 to 5 years of experience in security engineering, security operations, or an equivalent hands-on technical security role.
- Practical experience with cloud security, endpoint and MDM tooling, DLP platforms, identity and access management, and SIEM or alerting tools.
- Scripting ability to automate workflows and integrate with REST APIs.
- Working knowledge of SOC 2, ISO 27001, PCI DSS, or DORA.
- Ability to produce control narratives, incident summaries, and stakeholder-facing documentation.
- Ability to work across hands-on engineering, compliance, and documentation.
- Experience with Bug Bounty or Vulnerability Disclosure programmes is a nice to have.
- Exposure to Security Trust Centre or external-facing security documentation is a nice to have.
- Familiarity with DORA implementation is a nice to have.
Responsibilities
- Monitor, triage, and respond to security alerts and incidents across cloud, endpoint, and SaaS environments.
- Own and extend Data Loss Prevention controls, including policy tuning, coverage analysis, and endpoint rollout.
- Manage device compliance and identity workflows through MDM platforms and REST APIs.
- Run vulnerability scanning, track remediation, and contribute to board-level risk reporting.
- Translate SOC 2, ISO 27001, PCI DSS, and DORA requirements into technical controls, evidence processes, and automated checks.
- Operate the Bug Bounty and Responsible Disclosure programme.
- Build scripts and lightweight tools to automate security operations and improve audit evidence quality.