Staff Security Engineer

Ebury is a global fintech firm dedicated to empowering businesses to expand internationally through tailored and forward-thinking financial solutions. Since our founding in 2009, we've grown to a diverse team of over 1,700 professionals across 40+ offices and 29+ markets worldwide. Joining Ebury means becoming part of a collaborative and innovative environment where your contributions are valued. You'll play a key role in shaping the future of cross-border finance, while advancing your own career in a dynamic, high-growth industry.

Staff Security Engineer

Hybrid: 4 days in the office, 1 day working from home

Ebury Bank Brazil (EBB) is our Brazilian subsidiary, authorised and regulated by the Central Bank of Brazil. We provide cross-border payments solutions, FX services, and trade finance to Brazilian businesses expanding internationally.
We are seeking a Staff Security Engineer to provide technical leadership and hands-on implementation for our security transformation initiatives. This is a senior individual contributor role requiring deep technical expertise, strong coding abilities, and the ability to deliver complex security solutions while influencing strategy across the organization.
As a Staff Engineer, you will architect security solutions and personally implement the most critical components, establish technical standards through working code, and guide teams by example while collaborating with Group Security leadership.

Key Responsibilities

Technical Leadership & Implementation

• Define security architecture while leading hands-on implementation of critical systems
• Build and deploy enterprise-scale security solutions in GCP
• Establish security engineering standards through code and working examples
• Lead by example with high-quality technical deliverables
• Balance strategic thinking with pragmatic implementation

Security Architecture & Engineering

• Design and implement identity and access management solutions (Keycloak)
• Build zero-trust security controls for cloud infrastructure
• Develop security automation and tooling using Python, Golang, and Terraform
• Implement SIEM integrations and pipelines
• Create reusable security libraries and frameworks

Cloud Security Delivery

• Lead GCP security remediation and hardening initiatives
• Implement Infrastructure as Code for security controls
• Build automated compliance and policy enforcement
• Execute complex migrations and security transformations

Cross-functional Collaboration

• Partner with Group Security on implementation standards
• Provide hands-on support to platform and software engineering teams for security integration
• Deliver proof-of-concepts and reference implementations
• Interface with compliance and information security teams to implement regulatory controls
• Demonstrate security solutions to stakeholders

Technical Mentorship

• Mentor engineers through pair programming and code reviews
• Lead by example with exemplary code and documentation
• Share implementation expertise through technical workshops
• Guide teams on security best practices through hands-on collaboration
• Build team capabilities while delivering critical projects

Required Qualifications & Technical Expertise

• 8+ years of security engineering experience, with 3+ years in staff/principal roles
• Expert-level hands-on experience with Google Cloud Platform security
• Advanced programming skills (Python required, Go beneficial)
• Extensive experience with Infrastructure as Code (Terraform)
• Proven track record of building and deploying security solutions at scale
• Deep hands-on experience with Kubernetes, identity systems, and SIEM platforms
• Expertise in security automation and DevSecOps implementation

Leadership & Influence

• Demonstrated ability to lead through technical excellence and delivery
• Track record of implementing complex security systems end-to-end
• Experience mentoring through code reviews and pair programming
• Ability to influence architecture decisions with working prototypes
• Strong technical writing and documentation skills
• Balance of strategic thinking with hands-on execution

Domain Knowledge

• Extensive experience in regulated financial services
• Deep understanding of security frameworks (ISO 27001, NIST, CIS)
• Knowledge of Brazilian financial regulations (BACEN, LGPD)
• Understanding of modern DevSecOps practices
• Experience with security governance and risk management

Professional Requirements

• Fluency in Portuguese and English (written and spoken)
• Ability to collaborate effectively with global teams
• Strategic thinking with attention to implementation details

Preferred Qualifications

• Experience building security programs in growing organizations
• Advanced cloud security certifications (e.g., Google Cloud Professional)
• Knowledge of payments systems security standards

Impact & Scope
As a Staff Security Engineer, you will:

• Personally implement critical security infrastructure and controls
• Shape security architecture through both design and working code
• Deliver high-impact security solutions that protect millions of transactions
• Establish implementation patterns adopted across engineering teams
• Build and deploy security platforms used throughout the organization
• Drive technical excellence through hands-on leadership

What We Offer

• Opportunity to define security architecture at a leading fintech
• High-impact role with significant technical influence
• Investment in professional development and growth
• Competitive base salary and discretionary performance bonus
• Annual conference and training budget

How to Apply
Please submit your application through our careers portal including:

• Comprehensive CV detailing both architectural and implementation experience
• Examples of security systems you've designed and built
• GitHub profile or code samples (if available)
• Cover letter highlighting your hands-on technical achievements

Application Requirements:

• Authorization to work in Brazil
• Clean background check and regulatory screening
• Professional references available upon request

About Us

Ebury is a FinTech success story, positioned among the fastest-growing international companies in its sector.
Founded in 2009, we are headquartered in London and have more than 1700 staff with a presence in more than 29 markets worldwide. Cultural diversity is part of what makes Ebury a special place to be. From Sao Paulo to Dubai, Vancouver to Auckland, we enjoy sharing team experiences and celebrating success across the Ebury family.
Hard work pays off: in 2019, Ebury received a £350 million investment from Banco Santander and has won internationally recognised awards including Financial Times: 1000 Europe's Fastest-Growing Companies.
None of this would have been possible without our proudest achievement: our great people. Enthusiastic, innovative and collaborative teams, always ready to disrupt and revolutionise the fast-paced FinTech sector.
At Ebury, we're committed to building a workplace where everyone feels valued, supported, and empowered to thrive. We're proud to have active employee networks and ESG initiatives that reflect our inclusive culture, including our Women's Network , LGBTQIA+ Network , and Veterans Network . These communities provide spaces for connection, mentorship, advocacy, and collaboration across our global teams.

We believe in inclusion. We stand against discrimination in all forms and have no tolerance for the intolerance of differences that makes us a modern and successful organisation. At Ebury, you can be whoever you want to be and still feel a sense of belonging no matter your story because we want you and your uniqueness to help write our future.

Please submit your application on the careers website directly, uploading your CV / resume in English.

Create a Job Alert

Interested in building your career at Ebury? Get future opportunities sent straight to your email.

Accepted file types: pdf, doc, docx, txt, rtf

We're committed to ensuring an inclusive and accessible recruitment process. Do you require any adjustments or accommodations to support you during the interview? *

LinkedIn Profile:

Do you currently have the right to work in the country of this position without restriction? * Select...

Will you now or in the future require visa sponsorship to work in the country of this position? *

Collaboration within our tech hubs is important to us, can you work 4 days from the office and 1 day per week from home? * Select...

By checking this box, I agree to allow Ebury to retain my data for future opportunities for employment for up to 365 days after the conclusion of consideration of my current application for employment.