Senior Security Engineer (Application Security)
Tazapay is a global payments company providing cross-border money movement.
Funding history
Investors
Projects
About Tazapay
Tazapay provides regulated global payment infrastructure for businesses operating across borders. Its unified platform supports payment acceptance, stablecoin-to-fiat conversion, multi-currency business accounts, treasury and FX management, local payment methods, hosted checkout, payment links, API integrations, and payouts in more than 100 currencies. The company also offers white-label collection and payout services for platforms, along with buyer protection, compliance, risk management, and fraud protection. Its stated customers include fintechs, Web3 platforms, marketplaces, travel companies, online gaming businesses, SaaS platforms, and digital-product providers.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will lead security initiatives across AWS cloud environments and payment applications built with Node.js and GoLang microservices. You will design cloud security architecture, run application security assessments and penetration tests, perform secure code reviews and threat modeling, integrate security tooling into CI/CD pipelines, and ensure compliance with financial regulations.
Requirements
- 6+ years of experience in cloud security with focus on AWS
- Hands-on experience with AWS Shield and CloudFront security
- Experience securing Node.js applications and GoLang microservices
- Experience with Gitleaks, OpenGrep, Prowler and ScoutSuite
- Experience with GuardDuty, Security Hub, Config and CloudTrail
- Knowledge of financial services security and payment compliance
- Proficiency in Terraform, CloudFormation and AWS CDK
- Experience with Docker and Kubernetes/EKS security
- Scripting skills in Python, Bash and PowerShell
Responsibilities
- Design and implement security architecture for AWS cloud environments
- Configure AWS Shield, CloudFront and WAF protections
- Secure AWS services including EC2, ECS, EKS, Lambda, RDS, S3 and API Gateway
- Conduct web, mobile and API vulnerability assessments and penetration testing
- Perform SAST, DAST, IAST and SCA assessments
- Perform secure code reviews and threat modeling using STRIDE
- Integrate security tools into CI/CD pipelines and IaC
- Develop security automation scripts using Python, Bash and AWS SDKs
- Ensure compliance with PCI DSS, SOX and GDPR
- Support incident management, compliance audits and risk assessments
