Security Engineer

Triple; España; Remote; EUR 65,000 - 95,000; Full time

Benefits offered by this job

Remote 100%

Equity

Job summary

Triple is seeking a hands-on Security Engineer to own PCI DSS for our AI-driven banking operations. You will work with product teams and banks to ensure Triple's AI infrastructure meets PCI expectations, including vulnerability management, secrets/key management, and secure design reviews.

You will also harden cloud and container infrastructure, run threat modeling and pen tests, and help secure AI agents handling card and dispute data for banks, while answering security questionnaires and

Qualifications

• 3+ years in security engineering, ideally in payments or another regulated industry.
• Experience implementing PCI DSS controls and leading a PCI DSS assessment.
• Strong knowledge of cloud and application security, including identity and access.

Responsibilities

• Own PCI DSS at Triple: scope the cardholder data environment, implement controls, collect evidence, and manage the assessment with the QSA.
• Set up and run vulnerability scanning, logging and monitoring, secrets management, key management, and access control.
• Harden cloud and container infrastructure.
• Review designs before they are built.
• Run threat models and penetration tests, and see fixes through to production.
• Secure the AI agents that handle card and dispute data for banks.
• Answer security questionnaires and participate in technical reviews with banks.

Skills

PCI DSS

Cloud security

Infrastructure as Code

Threat modeling

Penetration testing

AI/LLM security

Security automation

Job description

A hands-on security engineer who has taken a company through PCI DSS and wants to do it again at Triple. You will be part of the engineering team and work with product and with banks' security teams, so that Triple's AI infrastructure meets the standards banks require.

About Triple

Triple is building the intelligence layer for financial services. Triple is building the intelligence layer for financial services. From our roots in merchant transaction data, we’ve expanded to solve one of the industry's biggest challenges: payment disputes. We are deploying AI agents to fully automate this for top-tier card issuers.

With $10M in funding and a global footprint spanning over 60 banks and fintechs (including Airwallex, Qonto, and Trade Republic), we are a fast-moving, experienced team. Join us to help shape the future of banking operations.

What you will do

• Own PCI DSS at Triple: scope the cardholder data environment, implement the controls, collect the evidence, and take us through the assessment with the QSA
• Set up and run vulnerability scanning, logging and monitoring, secrets management, key management, and access control
• Harden our cloud and container infrastructure
• Review designs before they are built
• Run threat models and penetration tests, and see the fixes through to production
• Secure the AI agents that handle card and dispute data for banks
• Answer security questionnaires and join technical reviews with banks

What you need

• 3+ years in security engineering, ideally in payments or another regulated industry
• You have implemented PCI DSS controls and taken a company through a PCI DSS assessment
• Solid knowledge of cloud and application security, including identity and access
• You write code and infrastructure as code
• Comfortable answering detailed technical questions from bank security teams
• Experience with SOC 2 is a plus
• Experience securing LLM or AI systems is a strong plus

Conditions

100% remote. Competitive salary, and equity. We are an AI-native company: every engineer here works with coding agents daily, and you will have the AI tools you need without usage limits. The chance to shape how the world's largest banks run operations with AI.

Join Triple and help us build the intelligence platform for banking operations.