👆About Crezco

We are a technology driven payments company whose mission is to makes global payments easy for SMEs. We are the first account-to-account (open banking) payment provider to target SMEs and handle cross-border payments. Our product handles both domestic and international payments, accounts receivable and accounts payable, and can be delivered directly or via our API. There is no glass ceiling on how far Crezco can grow.

For now we are Seed/Series-A stage start-up at the beginning of our journey. We're growing at an incredible pace, with many happy customers, but there's plenty left to do and we need great people to join our journey and help us achieve our goals.

👇About the role

We’re looking for an exceptional InfoSec engineer looking to work in a start-up, generate their own ideas, and take ownership and pride in their work. You will be responsible for ensuring the security and integrity of our products throughout their lifecycle. You will collaborate with cross-functional teams, including engineering, product management, and IT, to identify and mitigate potential security risks, develop security strategies, and implement industry best practices.

Experience level: Senior (6+years of relevant experience - some of it in a hyper-growth company)

🎯 Responsibilities

• Run the day to day security operations function
• Own security monitoring, incident response and threat intelligence
• Own and define the short and long term strategy for security operations a Crezco including the technology, people and processes required to support that strategy
• Implementing security controls in CI/CD pipelines and related tooling, both for Dev and DevOps teams
• Coordinating penetration tests (both internal and 3rd party) and resulting vulnerability remediations
• Setting standards for secure application development across various teams and squads in Crezco
• Taking part in architecture-related initiavies and providing security input to development of new features and products

✅ Requirements

• 6+ years of hands-on application security experience
• Experience working with Dev and DevOps teams (or part experience as a developer)
• Working understanding of cloud security principles (Azure preferred) and application deployment in cloud environments
• You have defined and managed information security incident response capabilities