Remote Security Engineer

Companies’ bank accounts are hidden behind clunky UIs, antiquated direct connection protocols, and heavy treasury management systems. We are building a cutting-edge payment operations platform. We develop bank integrations and advanced payment and account management features. We expose them with an elegant API that developers love and a modern dashboard that finance managers adore. Think of us as Stripe for bank payments. With Numeral, fintech companies, insurtech companies, proptech companies, marketplaces, and platforms can finally scale their bank operations 🚀

Founded in June 2021 within eFounders, we are a 10-people team, have signed Spendesk and Swile as our first major customers, and are about to launch our product. We are getting ready to accelerate in 2022 and this is where you come into play.

We value and strive for:

• Integrity
• Ownership
• Pragmatism
• Continuous improvement

Our tech principles & stack

We apply lean and agile principles, test-driven development, behavior-driven development, and domain-driven development around a hexagonal architecture.

Driven by mastery and an appetite for continuous improvement, we are eager to learn and share knowledge.

We strive for software craftsmanship and good practices, such as clean code, peer programming, and code reviews.

Our stack includes:

• TypeScript and React
• Go, Kafka, and PostgreSQL
• AWS (EC2, S3, EKS, RDS, HSM...)
• Docker, GitLab, and Datadog

The role

We are looking for a Security Engineer to join Numeral reporting directly to the CTO.

With a highly critical environment, we are facing multiple challenges security-wise, with a goal to be the best payment automation platform, security is one of our top priorities.

We established a clear plan toward ISO 27001 and SOC2 certifications. We also need to address current security threats and change current habits.

This role is about operational security. You will participate in the definition of our security architecture and tools and operate them on a daily basis.

The scope includes:

• Defining a secure by design cloud network and architecture
• Working hand in hand with the development team to define and apply best security practices
• Building and maintaining security compliance
• Deployment or management of new security products and procedures
• Conducting penetration testing
• Monitoring networks and systems for security breaches or intrusions
• Deploying and configuring security softwares, such as VPN, antivirus, firewalls, data encryption programs, and internal services
• Educating staff members on information security through training and awareness

Your profile

• Impeccable personal ethic, discretion, and rigor
• Outstanding interpersonal skills to be able to alert users about security risks in an effective way
• Proven hands-on experience securing cloud infrastructure
• Good general knowledge in the field of information systems security
• Basics in software development are useful, as well as a very good knowledge of scripting languages (Python, Perl…) and ideally Go
• Good knowledge of AWS cloud (EC2, EKS, Networking, KMS, RDS…)
• Ability to discover and patch SQLi, XSS, CSRF, SSRF, authentication and authorization flaws, and other web-based security vulnerabilities (OWASP Top 10 and beyond)
• Knowledge of common authentication technologies, including OAuth, SAML, CAs, and OTP

Benefits

• An exciting challenge with a solid team in a fast-learning environment
• Offices in the heart of the Parisian startup district (Grands Boulevards / Poissonnière)
• Latest MacBook Pro + 28" 4K screen