Cybersecurity Engineer - Cloud, Apps & Compliance (Fintech)

erad; United States; Remote; USD 140,000 - 180,000; Full time

Job summary

erd is a Sharia-compliant fintech providing SME financing in Saudi Arabia and the UAE. We are hiring a Cybersecurity Engineer to own the security of our platform, our people and our devices, reporting to the CTO in a fully distributed engineering team that ships with AI-assisted tooling.

We especially value penetration testers and security auditors who are ready to move from finding issues to owning fixes, with strong cloud security, incident response, and ISMS governance experience.

Qualifications

• 3+ years in security, ideally including time as a penetration tester or security auditor at a pentest firm, security consultancy or compliance platform.
• Hands-on web application, API and cloud pentesting; you can find and exploit real vulnerabilities, write them up clearly, and work with engineers on the fix.
• Practical security experience on at least one major cloud provider: IAM, network controls and logging.
• Experience with WAF and zero-trust access tooling.
• Strong Linux and networking fundamentals: SSH, TLS, DNS, firewalls and VPNs.
• Comfortable writing automation in Python or Bash, and reviewing application code for security issues (OWASP Top 10).
• Incident response experience, including investigating from raw logs.
• Familiarity with ISO 27001 or SOC 2 controls and producing audit evidence.
• Some experience administering an identity provider and managing devices with an MDM.
• Uses AI tools to work faster and checks their output critically.
• Fluent English, written and spoken.

Responsibilities

• Security engineering and testing: Own the security posture of our cloud environment, including IAM, network exposure, host hardening and patching.
• Test our web apps and APIs with internal pentests and coordinate with external testers.
• Build and run vulnerability management across code, dependencies, hosts and third-party software with SLA tracking.
• Review designs and pull requests, embedding security into the delivery pipeline.
• Lead incident response end to end: triage, containment, investigation, root cause and write-ups for management and regulators.
• Run phishing awareness, tabletop exercises and restore tests.
• Governance and compliance: Run our ISMS, control evidence, risk register, policies, vendor security reviews, audit support.
• Translate CMA, DFSA, KSA and UAE data protection requirements into practical controls and evidence.
• IT work (≈20%): manage joiner/mover/leaver access, SSO, offboarding and data handover; manage laptops via MDM.
• Administer identity and collaboration tools, password manager and MFA; automate repetitive parts.

Skills

Security testing

Incident response

Cloud security

Python scripting

Linux fundamentals

Networking

Threat modeling

Auditing / compliance

Tools

WAF

IAM

MFA

SAML

Job description

erd is a Sharia-compliant fintech providing SME financing in Saudi Arabia and the UAE. We are hiring a Cybersecurity Engineer to own the security of our platform, our people and our devices, reporting to the CTO in a fully distributed engineering team that ships with AI-assisted tooling.

We especially value penetration testers and security auditors who are ready to move from finding issues to owning fixes, with strong cloud security, incident response, and ISMS governance experience.