Cyber Security Engineer

Our Company

NymCard is a full-stack payments infrastructure company. Founded in 2018, we give banks and financial institutions one platform, nCore, to issue cards, move money, lend, settle, and manage financial crime as a single system, not separate vendors stitched together. nCore is AI-native and built on a real-time data core, so every product runs on one shared view of the customer.

We're a team of 150+ with a high bar. AI isn't a department here, it's how every team works, and we back decisions with data, not opinion. The way we work has a name, BOLD: we build trust through transparency, we own outcomes rather than tasks, we lead with speed because in payments a delay is a real cost, and we deliver excellence as a habit. If you want real ownership and room to move fast, this is the team for you.

The Role

The Cyber Security Engineer assumes a crucial role in safeguarding the organization’s information assets by maintaining the confidentiality, integrity, and availability of critical data. They are responsible for implementing and managing robust security measures, conducting comprehensive security assessments, mitigating vulnerabilities, and promptly responding to security incidents. The Cyber Security Engineer collaborates closely with cross-functional teams to identify potential threats, deploy effective controls, and provide technical expertise to fortify the organization’s systems, networks, and data against cyber threats and malicious activities.

What You’ll Be Doing

• Work closely with Information Security head on analyzing and identifying various information security related risks and vulnerabilities.
• Propose, design and implement relevant security changes, where feasible.
• Analyze regulatory security requirements across GCC where required.
• Play a core role in the design and acceptance of new infrastructure and platform initiatives from a security perspective.
• Perform regular internal and external vulnerability scans as per the corporate policies and procedures, and advise DevOps Team about priorities,
• Organize regular internal and external penetration tests as per the corporate policies and procedures.
• Support Technology teams in various internal and external security audits with focus on automated / regular infrastructure audits (IAC security) — Cloud services / Terraform / k8s etc.
• Lead, in close collaboration with other Technology team, the remediation of audits, scans and pen-tests findings.
• Coordinate the installation, configuration, and maintenance of mission-critical security applications such as AV, SIEM, DLP, FIM with DevOps and others related.
• Champion information security topics and concepts amongst the Technology team while acting as an ambassador for the InfoSec team.
• Help with source code security reviews for various development languages.

What You Bring

• Excellent communication skills, both written and oral.
• Strong interpersonal, organizational skills and a team player
• Positive can-do attitude and a flexible approach.
• Excellent analytical skills and detail oriented
• Ability to learn new technology, systems and applications quickly.
• Capability to “think on your feet”, solve problems and also predict and resolve future issues
• Strong stakeholder management skills and an ability to partner effectively with all.
• Degree in Engineering or Information Technology related field
• Minimum of 3 years work experience in Information Security engineering
• Excellent understanding of various information security frameworks and practices. Working experience with PCI-DSS compliance is a great plus
• Advanced working experience with infrastructure security tools including but not limited to WAFs, IP/IDS, NextGen Firewall,
• Advanced working experience with system-level security tools including but not limited to Antivirus, File Integrity Monitoring, Log Management (SIEM) - Wazuh/OSSEC, Identity Access Management.
• Good knowledge in Kubernetes, Docker Swarm or other cluster management software