Senior Security Engineer - LemFi Europe

LemFi provides international payment products for immigrants, including multi-currency wallets, global money transfers, payment requests, and eSIM connectivity.

Distributed
About LemFi

LemFi is a financial technology company offering international payment products designed to help immigrants thrive financially. Its services include multi-currency wallets, international money transfers to more than 30 countries, money requests and payment links, and eSIM connectivity. Transfers can be sent to bank accounts, mobile money, and other destinations, typically arriving within minutes.

View jobs by LemFi

Skills

Candidate Availability

Required and preferred rules are kept separate and reflect the wording in the original posting.

About the Role

You will own how the company is protected from the inside: laptops, accounts, inboxes and internal tools. You'll report to the CTO, build controls, write detections and run incidents. You'll configure EDR and device management, manage SSO, MFA and privileged access, secure email and SaaS, hunt threats, lead incident response through forensics and root cause, turn threat intelligence into detections, and automate triage and response using AI and ML.

Requirements

  • At least 5 years of hands-on security work across incident response, detection engineering, threat intelligence or security engineering
  • Hands-on experience running EDR at scale across Windows and macOS
  • Strong identity and access management experience with Entra ID, Okta or Google Workspace
  • Led incidents end to end including endpoint forensics
  • Written SIEM detections with low false positive rates
  • Python or Go proficiency
  • Practical use of AI or ML in security work
  • Nice to have: banking, payments or regulated financial experience, network security, AWS cloud security, purple team exercises mapped to MITRE ATT&CK

Responsibilities

  • Build endpoint protection across laptops and devices including EDR, device management, hardening and patching
  • Own identity and access including SSO, MFA, privileged access, joiner and leaver flows and access reviews
  • Secure email, collaboration and SaaS including phishing defence
  • Do detection engineering and threat hunting across endpoint, identity and internal systems
  • Run incident response from alert through forensics and root cause
  • Turn threat intelligence into detections and controls
  • Automate triage, response and access management using AI and ML