Cyber Security Engineer

Privalgo Limited; City Of London; On-site; GBP 70,000 - 110,000; Full time

Job summary

Privalgo Limited, headquartered in London, is seeking a Cyber Security Engineer to safeguard our fintech platforms and cross‑border payment services. You will define secure coding standards, mentor engineers, and shape the security architecture for cloud and on‑premises systems.

You will lead incident response, run threat hunting and forensics, and drive risk assessments across payment processing and partner integrations, ensuring PCI DSS, GDPR and PSD2 compliance.

Qualifications

• Bachelor’s or Master’s degree in Computer Science, Information Security, or related field.
• 5+ years of cyber security engineering experience, preferably in fintech/ banking / payments.
• Expertise in network, application, cloud security and data protection.
• Experience with security tools (SIEM, IDS/IPS, vulnerability scanners, endpoint protection).
• Hands-on incident response, threat hunting and forensic analysis.
• Strong communication, leadership and stakeholder management skills.

Responsibilities

• Develop and refine minimum engineering and architectural security standards for code and monitor deficiencies.
• Mentor engineers on secure coding practices.
• Design and maintain secure network and application architectures; oversee SDLC security.
• Develop automated security testing and vulnerability reporting; lead incident response and forensic investigations.
• Identify, assess and mitigate cyber risks across PSP operations and third‑party integrations.
• Lead the security strategy and ensure compliance with PCI DSS, GDPR, PSD2.

Skills

Network security

Application security

Cloud security

Data protection

Incident response

Threat hunting

Forensic analysis

Leadership

Education

Bachelor’s or Master’s degree in Computer Science / Information Security

Tools

SIEM

IDS/IPS

Vulnerability scanners

Endpoint protection

Job description

Privalgo is an FCA-authorised international payments and foreign exchange specialist, helping businesses send, receive, manage and optimise cross-border payments worldwide. Founded in 2018 and headquartered in London, Privalgo combines innovative payment technology with dedicated relationship management to deliver secure, efficient and tailored global payment solutions. Operating across more than 95 countries and supporting over 140 currencies, we enable organisations to streamline international transactions, manage currency risk and access a seamless multi-currency payment infrastructure.

Position Overview

The Cyber Security Engineer will play a pivotal role in safeguarding the digital assets, systems, and data of our organisation. The successful candidate will provide technical leadership, strategic guidance, and hands-on expertise to ensure that our products, infrastructure, and services remain secure and compliant in a rapidly evolving threat landscape. This role involves close collaboration with technology, compliance, and business teams to embed robust security practices across the business.

Key Responsibilities

• Develop, implement, and continuously refine the minimum engineering and architectural security standards for all code and continuously monitor for deficiencies and branches of required practice within the development team.
• Coaching, mentoring, and education of engineers on and offshore to ensure they understand what secure code looks like and how to produce it

Security Architecture & Engineering:

• Design and maintain secure network and application architectures; oversee secure software development lifecycle (SDLC) practices; ensure encryption, authentication, and authorisation controls are robust.

Develop Automated Security Testing / Continuous Evaluation:

• Develop, implement, and continuously refine preferably automated tooling and reporting to perform some level of dynamic penetration testing of systems and reporting of vulnerabilities.
• Lead incident response activities, including detection, containment, eradication, and recovery. Conduct forensic investigations and post-incident reviews, reporting findings to senior management.
• When we come under new or sustained attack, be front and centre owning our response and mitigation, taking the lead and organising across technology to repel the attempted intrusion.
• Identify, evaluate, and mitigate cyber risks related to PSP operations, including payment processing systems, customer data, and third-party integrations. Conduct regular risk assessments and vulnerability scans.

Security Strategy & Leadership:

• Develop, implement, and continuously refine the cyber security strategy for the organisation, aligning with business goals and regulatory requirements. Advocate for security best practices across all teams.

Compliance & Regulatory Adherence:

• Ensure compliance with relevant regulations (e.g., PCI DSS, GDPR, PSD2), standards, and best practices. Liaise with auditors and regulators as required.

Security Awareness & Training:

• Develop and deliver cyber security awareness programmes for staff. Mentor and guide junior engineers and other stakeholders on security matters.

Third-Party & Vendor Security:

• Evaluate and manage the security posture of third-party vendors and partners, ensuring contractual obligations and technical controls are enforced.
• Stay abreast of the latest cyber threats, technologies, and regulatory changes. Continuously assess and improve the organisation’s security posture.

Required Skills & Experience

• Bachelor’s or Master’s degree in Computer Science, Information Security, or related field.
• Proven experience (5+ years) in cyber security engineering, preferably within fintech, banking, or payment services. Ideally you would be a purple teamer from a midsized business, with strong hands-on experience, looking to take the next step up to owning the function, building a team, and setting a world class standard.
• Expertise in network security, application security, cloud security, and data protection.
• Demonstrable experience with security tools (SIEM, IDS/IPS, vulnerability scanners, endpoint protection).
• Hands-on experience in incident response, threat hunting, and forensic analysis.
• Excellent communication, leadership, and stakeholder management skills.

Personal Attributes

• Analytical and detail-oriented, with a pragmatic approach to problem-solving.
• Proactive and adaptable, able to thrive in a fast-paced, high-stakes environment.
• Strong ethical standards and a commitment to confidentiality.
• Ability to lead and inspire cross-functional teams.