Senior Engineer, Security
Taptap Send· Engineering
RemoteFull-timePosted 3w ago
About the role
Senior Engineer, Security at Taptap Send focusing on find-and-fix security, remediation in Terraform and Python, ownership of AWS security, proactive threat detection, and incident response within Platform Engineering.
Responsibilities
- Fix it, don't just find it: Remediate security findings across our infrastructure, writing the Terraform and application changes that close them. Where the fix belongs to another team, drive it to completion. Run vulnerability management from Snyk, Prowler, and ASV findings through to verified fixes.
- Own AWS security: Cloud posture across IAM and least privilege, network boundaries, secrets management, and logging coverage. Define the technical security baselines new services are built to, covering host hardening, WAF configuration and deployment patterns, and enforce them as code.
- Find problems before anyone else does: Regular penetration testing against our own environment, threat modelling and security reviews for new services early enough to change the design, including integrations with payment and custody providers.
- Respond when it matters: Serve as technical lead for security incidents, including forensic investigation. Own and improve detection coverage in Datadog, tuning alerts for signals.
Qualifications
- Five or more years in hands-on security engineering, with responsibility for production systems.
- You write and ship code. Terraform and Python, and enough application fluency to fix what you find rather than hand it off.
- Deep AWS security experience, including IAM and least privilege at organization scale, and container workloads in ECS or EKS.
- Application security, including threat modelling and hands-on offensive testing against cloud and application targets.
- Security incident response, including forensic investigation.
- Experience with vulnerability management and driving fixes through teams you do not manage; self-directed remediation work.
- Experience in regulated environments turning ISO 27001, PCI DSS, or SOC 2 requirements into engineering work.
- Detection engineering in Datadog or comparable SIEM.
- Securing CI/CD pipelines, particularly GitHub Actions.
- Cryptography and secrets management in practice, including key rotation and certificate lifecycle.
- Using AI coding tools to remediate at scale, and reviewing AI-generated code with a security eye.
- Experience with payments, cards, or digital assets.
Skills
Required:Security engineeringTerraformPythonAWS securityThreat modellingVulnerability managementDatadog / SIEMCI/CD securityCryptography and secrets management
Nice to have:Payments / digital assets
Benefits
Last updated Oct 1, 2026. Interested? Apply on the company site.
About Taptap Send
Send more, spend less.
Money transfer with great rates, super quick delivery and no transfer fee on most sends.
Money transferMobile moneyFast transfersRemittance
More open roles at Taptap Send
- General Application3w agoGlobal · No Department
- IT Support Engineer3w agoDubai · Engineering
- Head of Business Operations — Business4w agoLondon · Customer Experience
- Global Business Development Lead1mo agoDubai, London +1 more · Markets
- Head of APAC1mo agoHybrid (Singapore) · Markets