Senior Security Engineer - LemFi Europe

LemFi; Dublin; Hybrid; EUR 110,000 - 140,000; Full time

Job summary

LemFi in Dublin is seeking a Senior Security Engineer to own how we protect our people and products from the inside. You will build controls, write detections and run incidents, reporting directly to the CTO.

It’s a small team, so you’ll shape the playbook and own security outcomes across endpoints, identities and internal tools. You’ll drive threat detection, incident response and intelligence-driven controls, with a bias toward automation, AI and ML to sharpen detections.

Qualifications

• 5+ years of hands-on security work across incident response, detection engineering, threat intelligence or security engineering.
• Hands-on experience running endpoint protection or EDR at scale across Windows and macOS.
• Strong identity and access management experience with directories, SSO and MFA (Entra ID, Okta, Google Workspace).
• Led real incidents end to end, including forensic investigation on endpoints.
• Written detections in a SIEM that caught real activity and minimized false positives.
• Proficient in Python or Go to build tooling and automate work.
• Practical use of AI or ML in security work with demonstrated value.

Responsibilities

• Own endpoint protection across all laptops and devices (EDR, hardening, patching, containment).
• Manage identity and access (SSO, MFA, privileged access, joiner/leaver flows, access reviews).
• Secure email, collaboration, and SaaS with phishing defence and internal visibility.
• Build detections and perform threat hunting across endpoints, identity, and internal systems.
• Lead incident response from first alert through forensics and root cause analysis.
• Turn threat intelligence into detections and controls; improve coverage.

Skills

Incident response

Threat intelligence

Detection engineering

Security engineering

Python

Go

AI/ML in security

Tools

EDR

SIEM

Entra ID

Okta

Google Workspace

Job description

Ambition has no passport. That belief is why LemFi exists. We're the financial engine for people the world wasn't built to serve, the millions who move countries to build something better and find the financial system hasn't caught up with them yet. We started with remittances: the money people send home to the people they love. Now we run multi-currency accounts, Savings, eSIMs and Credit. Because staying connected to home and building somewhere new are not two separate things. They never were.

About the role

LemFi moves over $2B a month across 30+ countries for people who have built lives far from where they started. That makes us a target, in some of the most scrutinised payment corridors in the world, and attackers often go after the people and devices behind the product rather than the product itself. Here, security is an engineering problem first.
We're looking for a Senior Security Engineer in Dublin to own how we protect LemFi from the inside: every laptop, account, inbox and internal tool our teams rely on. You'll report directly to our CTO, build the controls, write the detections and run the incident when something gets through. It's a small team, so you'll write the playbook rather than follow one. There's compliance work at LemFi, but this seat is about stopping attackers and building controls, not running audits.

What you'll build and own

• Endpoint protection across all laptops and devices: EDR, device management, hardening and patching, configured so a compromised device is caught fast and contained faster.

• Identity and access across the company: SSO, MFA, privileged access, joiner and leaver flows, and access reviews that actually remove access.

• Email, collaboration and SaaS security, including phishing defence and visibility into the internal tools our teams use every day.

• Detection engineering and threat hunting across endpoint, identity and internal systems. Write the detections, tune out the noise, and hunt for what they miss.

• Incident response from first alert through forensics and root cause to the change that closes the gap for good.

• Threat intelligence on the actors targeting fintech employees and our corridors, turned into detections and controls rather than reports.

• Automation that removes manual work from triage, response and access management, using AI and ML wherever they make detection sharper.

Your experience

• At least 5 years of hands-on security work across incident response, detection engineering, threat intelligence or security engineering, with recent work you built and shipped yourself.

• Hands-on experience running endpoint protection or EDR at scale across Windows and macOS.

• Strong identity and access management experience with directories, SSO and MFA, such as Entra ID, Okta or Google Workspace.

• Led real incidents end to end, including forensic investigation on endpoints.

• Written detections in a SIEM that caught real activity, and kept false positive rates down.

• Write Python or Go well enough to build your own tooling and automate your own work.

• Practical use of AI or ML in security work: you can show where it helped, and you validate its output rather than trust it blindly.

Nice to have

• Experience in banking, payments or another regulated financial environment, or rolling out EDR, MDM or email security from scratch.

• Network security experience (firewalls, VPN, zero trust) or cloud security in AWS, particularly workforce access and logging.

• Purple team exercises mapped to MITRE ATT&CK, or knowledge of the threat landscape in African, LATAM or Asian payments markets.

Why join LemFi?

Your work here puts money back into families' pockets. That's the reward, and the weight of it. You'll take on some of the hardest problems in finance alongside people who do their best work when the stakes are real. We move fast and we expect a lot, because our customers can't afford for us to do otherwise. In return you get room to own real problems, global impact you can see, and a team that won't slow you down.

Bring grit and ownership and there's a place for them here. Ambition belongs here, come and show us yours.
Follow us on LinkedIn and Instagram and if you haven't already, download the app on the App Store or Google Play.

Recruitment agencies notice

LemFi does not accept unsolicited CVs from recruitment agencies. We work only with agencies on our preferred supplier list, and only when we’ve asked them for their support. Any CVs sent to us outside this arrangement will not incur a fee.

AI in hiring at LemFi

We use AI to cut admin, like notetakers that let interviewers focus on the conversation instead of typing. AI never makes hiring decisions. That responsibility always sits with our hiring teams. Read our AI use policy to see how we use AI and how we expect you to use it too.