API & Cloud Security Lead - Threat Modeling & IR

Mama Money

Finland

On-site

EUR 90,000 - 130,000

Full time

4 hours ago

Be an early applicant

Get a reply from this employer

Your resume and cover letter, tailored to exactly what they’re hiring for.

Get past ATS filters

Job summary

Mama Money seeks a hands-on Senior Security Engineer in Finland to own security across APIs, partner integrations, and outsourced security operations. You’ll set standards, perform threat modelling, review code and integrations, and lead incident response with clear risk communication to engineers, leadership, and regulators.

You’ll partner with SRE and development teams to bake security into pipelines, manage IAM/secrets, WAF, and third-party risk reviews.

Qualifications

6+ years in information security, with at least 3 in application, API or cloud security.
Hands-on API security practices including OAuth 2.0/OIDC, JWT, mTLS, and API security standards.

Responsibilities

Own the security of public and partner APIs: authentication, secrets handling, request signing, rate limiting, input validation.
Threat model every new partner integration and review existing ones.
Monitor third-party calls for anomalies and trace data flow.
Own WAF and edge security; tune rules, manage bot/DDoS protection, minimize false positives.
Set up alerts for unusual traffic and investigate incidents promptly.
Integrate security into development: code review, dependency and secrets scanning, SAST/DAST.
Run penetration tests and remediate findings; assess third-party risk before connections.
Own relationship with outsourced provider for security operations and reporting.
Lead incident response and tabletop exercises; ensure ISO 27001 ISMS controls are maintained.