Security Engineer (Relocation within EU)

About Mollie

We provide a simple and clear payment API, which enables webshop and app builders to implement more than ten different payment methods in one go.

In the first few years of existence, Mollie was a developer-only adventure, and about 15 years later devs and techs still comprise roughly 30% of all staff. As a natural consequence, Mollie still is—and aims to remain—highly tech-minded. We take a developers-first approach to our products and internal development strategy, something that both our customers and our developers appreciate.

This focus on the technical side can be found in various things. For example, you pick whatever tools you want to use to get the job done. MacBooks, absurdly large screens, top-notch noise-canceling headphones, and whatever other equipment makes your nerd-boat float. We go to great lengths to create a space that allows you to focus on the things that will make you happy: shipping great features you helped dream up and build.

Position

Our Security Domain delivers security services throughout the whole organisation with the goal of making Mollie the most trusted and secure payment service provider.

Your Opportunity

As a Security Engineer at Mollie, you will be supporting engineering teams in enhancing the level of security of the infrastructure in an enabling way. Security should not slow the business down but become a property and ability of the engineering teams. You will have to become part of product development, be able to communicate effectively with engineers, developers and SREs and make effective use of the available security tools to improve the quality of Mollie’s products and services.

We think security and privacy are quality attributes instead of separate departments. Policies and guidelines should not be blindly punished without investing in enabling teams. We also believe that classic security processes can unnecessarily slow teams down. Security should be scalable to meet the needs of today’s rapidly changing environments.

What you'll be doing

• Assist in engineering a secure corporate environment baseline
• Be a balancing force alongside the Site Reliability Engineers and engineering teams
• Assess the security of the corporate environment based on the Zero Trust Model principals
• Show that you have experience running and securing systems at scale
• Demonstrate ownership of vulnerability management, patching policies and securing our systems
• Participate in the security incident response processes
• Interact with vendors, researchers, and other 3rd parties to collaborate on security issues or processes

Your qualification

• Experience as Security Engineer or SRE
• Experience with Network Security (NGFW, Proxies, Segmentation)
• Experience with Identity Access Management
• Experience with Vulnerability Management and patching policies
• Knowledge of the Zero Trust Model principals
• Knowledge of common SSO techniques

The Security Engineering Team is responsible for delivering security services to all of the product teams as First Line of Defence of Mollie.

We provide services to enable value streams within Mollie to grow securely and productively as well as increasing the confidence in Mollie products and services to build trust with our customers. We also like to assist in solving security challenges that engineering teams encounter.

The main responsibilities for this role are - Security Defaults in Mollie Infrastructure, Zero Trust & Network Security, Identity Access Management, Vulnerability and Defect Management