Fintech Security Engineer: Cloud, Compliance & Bug Bounty

LemFi; Greater London; On-site; GBP 90,000 - 130,000; Full time

Benefits offered by this job

Bug Bounty Programme

Security documentation resources

Job summary

LemFi is building a borderless fintech platform with multi-currency accounts and cross-border payments. This security role sits at the intersection of security engineering, operations, and compliance, shaping the controls for SOC 2, ISO 27001, PCI DSS, and DORA across cloud, endpoints, and the vendor ecosystem.

You will monitor threats, extend DLP and identity controls, run vulnerability management, and produce board-ready risk reports, while enabling a scalable security posture for a

Qualifications

• 2–5 years in security engineering, security operations, or equivalent hands-on role, ideally in fintech/payments.
• Experience across cloud security (AWS/Azure/GCP), endpoint and MDM tooling, DLP, IAM, and SIEM.
• Scripting to automate workflows and REST APIs integration.
• Familiarity with at least one framework (SOC 2, ISO 27001, PCI DSS, DORA) and audit-support experience is a strong plus.
• Clear written communicator able to produce control narratives and incident summaries for non-technical audiences.
• Comfortable with ambiguity and balancing hands-on engineering with compliance/documentation.

Responsibilities

• Monitor, triage, and respond to security alerts and incidents across cloud, endpoint, and SaaS environments.
• Own and extend Data Loss Prevention controls: policy tuning and endpoint rollout coordination.
• Manage device compliance and identity workflows via MDM platforms with REST API reporting.
• Run vulnerability scanning and remediation tracking; contribute to board-level risk reporting.
• Translate SOC 2, ISO 27001, PCI DSS, and DORA into technical controls and automated checks; support external audits.
• Operate Bug Bounty and Responsible Disclosure programmes: triage submissions and coordinate remediation.
• Build scripts/tools to reduce manual security operations and enhance audit evidence; apply AI when valuable.

Skills

Cloud security

Endpoint and MDM tooling

Data Loss Prevention

Identity and access management

SIEM / alerting

Scripting

Compliance frameworks

Tools

MDM platforms

REST APIs

Job description

LemFi is building a borderless fintech platform with multi-currency accounts and cross-border payments. This security role sits at the intersection of security engineering, operations, and compliance, shaping the controls for SOC 2, ISO 27001, PCI DSS, and DORA across cloud, endpoints, and the vendor ecosystem.

You will monitor threats, extend DLP and identity controls, run vulnerability management, and produce board-ready risk reports, while enabling a scalable security posture for a