Cybersecurity Specialist – FinTech Payments

About the role

MoneyEU is seeking an experienced Cybersecurity Specialist to protect its modern payments infrastructure. You will work closely with technology, compliance, risk, and operations teams to secure applications, APIs, payment flows, and sensitive data across a fast‑growing FinTech platform.

Key responsibilities

• Conduct regular security, vulnerability, and penetration assessments.
• Monitor infrastructure, applications, APIs, servers, and networks for threats.
• Strengthen the security of the payment gateway and orchestration layer.
• Review API authentication, keys, tokens, webhooks, and access controls.
• Implement and maintain WAF, IDS/IPS, SIEM, endpoint protection, and security monitoring tools.
• Identify and mitigate credential attacks, account takeover, API abuse, DDoS, bot traffic, malware, data leakage, and unauthorized access.
• Configure cloud infrastructure, servers, databases, and networks securely.
• Enforce IAM, MFA, RBAC, privileged‑access and least‑privilege policies.
• Perform secure‑code and application‑security reviews with developers.
• Support PCI DSS compliance and payment‑industry security controls.
• Coordinate vulnerability remediation and security patches.
• Conduct third‑party and vendor security assessments.
• Develop incident‑response procedures and investigate security incidents.
• Maintain security logs, risk registers, and remediation documentation.
• Deliver employee cybersecurity awareness and phishing‑prevention training.

Required profile

• Proven experience in information security within FinTech or payments environments.
• Ability to collaborate with cross‑functional teams (tech, compliance, risk, operations).
• Strong analytical mindset for threat detection and remediation.
• Experience with security standards such as PCI DSS.

Required skills

• Penetration testing
• Vulnerability assessment
• Web Application Firewall (WAF)
• Intrusion Detection/Prevention Systems (IDS/IPS)
• Security Information and Event Management (SIEM)
• Endpoint protection
• Identity and Access Management (IAM)
• Multi‑Factor Authentication (MFA)
• Role‑Based Access Control (RBAC)
• PCI DSS compliance
• Secure code review
• Incident response
• API security
• Cloud security configuration
• DDoS mitigation