Security Engineer

About the Company

Pliant is a European fintech specializing in B2B payment solutions. Our modular, API-first platform helps businesses streamline spending, improve cash flow, and integrate payments into their financial workflows. Founded in 2020 and headquartered in Berlin, Pliant supports over 4,000 businesses and more than 20 partners globally.

Responsibilities

• Integrate security best practices throughout the SDLC to protect products, infrastructure, and customer data
• Design, implement, and maintain security automation tooling for patch and vulnerability management
• Embed security controls and guardrails into the developer platform
• Define and promote reusable, secure development standards and Terraform/Docker modules
• Harden containerized workloads including ECS and EKS
• Deploy and manage cloud security platforms like Wiz and drive remediation workflows
• Automate collection of audit-ready evidence for PCI DSS, ISO 27001, SOC 2, and DORA
• Support vulnerability management and lead incident response and post-mortems
• Conduct threat modeling, architecture reviews, and provide guidance on secure design

Requirements

• 5+ years of experience in a technical security role
• Strong proficiency with AWS services (IAM, KMS, CloudTrail, S3, GuardDuty, SCPs)
• Solid understanding of DevSecOps and CI/CD integration
• Proficient in Terraform and IaC tooling
• Proficient in Python, Bash, or TypeScript for automation
• Experience securing containers (Docker, ECS, EKS, or Kubernetes)
• Expert level understanding of OWASP Top 10 and software supply chain risks
• Experience managing cloud security platforms (e.g., Wiz, Orca, Lacework, Prisma Cloud)
• Experience with application security practices including SAST, DAST, and threat modeling
• Experience performing Application Penetration Testing or Vulnerability Research

Preferred Qualifications

• Exposure to compliance frameworks like PCI DSS, ISO 27001, or SOC 2
• Familiarity with detection engineering or lightweight SIEM tooling
• Contributions to open-source security tools

Benefits

• Attractive remuneration
• Choice of preferred OS (Windows or Mac)
• Flat hierarchy and transparent communication
• Flexibility and possibility to work remotely
• Company card with a monthly allowance for lunches and coffee