Senior Cybersecurity Engineer

About the role

finera. is a PCI DSS Level 1 payment‑orchestration platform. We are seeking an experienced, proactive Senior Cybersecurity Engineer to strengthen the security team and protect our infrastructure across endpoint, email, network and web‑facing payment platforms. The role combines senior security operations — incident ownership, detection engineering and L2/L3 escalation — with hands‑on engineering and administration of the enterprise security stack (EDR, email security, DLP, SASE/VPN, WAF, DDoS).

Key responsibilities

• Serve as the senior in‑house L2/L3 escalation point during business hours and own incident response end‑to‑end: triage, containment, eradication, recovery, root‑cause analysis and post‑incident review.
• Act as technical owner of the co‑sourced MDR / managed security service providing out‑of‑hours L1/L2 coverage, maintaining the escalation matrix, validating handoffs and overseeing service quality and SLAs across the 24/7 window.
• Operate, tune and harden the enterprise security stack (SIEM/XDR, EDR, email security, DLP, SASE/VPN, WAF, DDoS) and maintain detection content, correlation rules and incident‑response playbooks.
• Drive the implementation and evidencing of PCI DSS technical controls (Requirements 1,4,5,7,8,10,11,12) with the Cybersecurity Lead and QSA, including Cloudflare Layer 7 / WAF / DDoS architecture input.
• Review phishing and suspicious email, investigate malware and anomalous behaviour, handle senior security tickets and support periodic access reviews and audits.
• Author and maintain SOPs, runbooks and incident reports; mentor operational staff and reduce single‑point‑of‑failure risk.

Required profile

• Minimum 7 + years of hands‑on experience in cybersecurity, security operations or security engineering, including senior or lead responsibilities.
• Demonstrated experience implementing and evidencing controls under PCI DSS (or ISO 27001, NIST CSF, CIS Benchmarks).
• Proven end‑to‑end incident‑response ownership across the full lifecycle.
• Experience working with or managing a Managed Detection & Response (MDR) / managed SOC service, including escalation governance and SLA oversight.
• Degree in Computer Science, Information Security or related field, or equivalent practical experience.

Required skills

• EDR, XDR and SIEM operation, tuning and detection engineering.
• Email security, DLP, SASE and VPN platform administration.
• WAF, API security and DDoS mitigation (Cloudflare or comparable edge platforms).
• Network‑security fundamentals – TCP/IP, DNS, HTTP/S – and common attack techniques.
• Hands‑on experience with Check Point Harmony (Endpoint, Email & Collaboration, SASE) and Cloudflare Enterprise.

What we offer

• Competitive salary package aligned with experience and market standards.
• Medical insurance starting from day 1.
• Access to training resources and development opportunities.
• Well‑stocked office with snacks, drinks and refreshments available daily.
• Multinational organisation promoting a strong, collaborative culture with regular team‑building events.
• Employee Recognition Program celebrating Employee of the Month with special perks.