Security Engineer
Vivid Money Group is a European fintech offering personal and business financial services through digital accounts. Its services include payments, cards, cashback, interest accounts, international transfers, bookkeeping tools, investments, and cryptocurrency services.
About Vivid Money Group
Vivid Money Group operates a digital financial platform for individuals, freelancers, SMEs, enterprises, and other organizations across Europe. It provides business and personal accounts, IBANs, Visa cards, cashback, SEPA and SWIFT transfers, international payments, online payment acceptance, invoicing, bookkeeping integrations, tax filing, business travel, team spending controls, and AI-powered digital employees. The group also offers interest accounts, managed model portfolios, brokerage services for stocks, ETFs, iBonds, money market funds, and crypto-assets, as well as Crypto Earn services through regulated Vivid entities in Luxembourg and the Netherlands.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will own and improve internal security across identities, SaaS applications, endpoints, AI tooling, and networks. You will manage SIEM alerting, investigate and contain incidents, and improve preventive controls. You will administer identity and access controls, strengthen SaaS and endpoint security, defend against phishing, and automate repetitive security operations. You will identify gaps, lead technical initiatives independently, and maintain the roadmap for your security areas.
Requirements
- 5+ years of experience in security operations, corporate or IT security, or endpoint engineering
- SIEM detection engineering and incident-response experience
- Experience with identity providers, access recertification, least privilege, and PAM
- Knowledge of endpoint security and email and phishing defense
- Experience securing internal AI use, including shadow AI discovery, DLP, AI assistant controls, and risk frameworks
- Scripting and automation skills for building API-based tooling
- Clear written and spoken English
Responsibilities
- Own SIEM alerting, logging, detection-rule development, and false-positive reduction
- Investigate, contain, and resolve security incidents using clear runbooks
- Administer identity, SSO, MFA, conditional-access, and access-recertification processes
- Enforce least privilege, PAM, segregation of duties, and joiner-mover-leaver access controls
- Improve SaaS security posture and apply DLP controls
- Maintain endpoint security controls and automate remediation
- Secure email systems and run phishing simulations and security-awareness activities
- Build internal tooling and automate repetitive security operations
- Identify security gaps and lead improvement initiatives independently
Benefits
- Hybrid work in the Limassol office or fully remote work outside office locations
- Relocation support to Cyprus, including visa and package
- Learning and development budget
- Fully paid vacation and sick leave
- Sports compensation