Staff Security Engineer
Tazapay is a global payments company providing cross-border money movement.
Funding history
Investors
Projects
About Tazapay
Tazapay provides regulated global payment infrastructure for businesses operating across borders. Its unified platform supports payment acceptance, stablecoin-to-fiat conversion, multi-currency business accounts, treasury and FX management, local payment methods, hosted checkout, payment links, API integrations, and payouts in more than 100 currencies. The company also offers white-label collection and payout services for platforms, along with buyer protection, compliance, risk management, and fraud protection. Its stated customers include fintechs, Web3 platforms, marketplaces, travel companies, online gaming businesses, SaaS platforms, and digital-product providers.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will design and manage cloud security controls across AWS, secure microservices and CI/CD pipelines, and oversee security operations including SIEM, threat detection and vulnerability management. You will lead incident response and maintain security governance, policies and compliance with frameworks such as ISO 27001, SOC 2 and PCI DSS.
Requirements
- 8+ years in information security covering application and cloud security
- Extensive experience securing microservices in GoLang, Java or Scala
- Advanced AWS cloud security experience
- Expert web application penetration testing
- Hands-on with govulncheck, Gitleaks, Semgrep/OpenGrep, Prowler and ScoutSuite
- Experience securing Node.js, Vue.js and ReactJS applications
- Experience leading security teams
- AWS Security Specialty certification
Responsibilities
- Design, implement and manage cloud security controls and architecture across AWS
- Configure AWS Shield and manage CloudFront security and WAF rules
- Secure AWS services across multi-region deployments
- Lead secure CI/CD pipelines and DevSecOps integration
- Architect container security for Docker and Kubernetes
- Manage SIEM, EDR/XDR and enterprise security solutions
- Lead threat detection, threat hunting and vulnerability remediation
- Lead incident response, root cause analysis and forensic coordination
- Define security standards and policies
- Ensure compliance with ISO 27001, NIST, SOC 2, PCI DSS and GDPR
- Support audits and prepare security reports
