Cybersecurity Specialist – FinTech Payments

About the role

MoneyEU is seeking an experienced Cybersecurity Specialist to protect its modern payments infrastructure. You will work closely with technology, compliance, risk, and operations teams to secure applications, APIs, payment flows, and sensitive data across a fast‑growing FinTech platform.

Key responsibilities

• Perform regular security, vulnerability, and penetration assessments.
• Monitor infrastructure, applications, APIs, servers, and networks for threats and suspicious activity.
• Strengthen the security of the payment gateway and orchestration layer.
• Review API authentication, keys, secrets, tokens, webhooks, and access controls.
• Deploy and maintain WAF, IDS/IPS, SIEM, endpoint protection, and other monitoring tools.
• Identify and mitigate credential attacks, account takeover, API abuse, DDoS, bot traffic, malware, data leakage, and unauthorized access.
• Configure cloud, server, database, and network environments securely.
• Implement IAM, MFA, RBAC, privileged‑access controls, and least‑privilege policies.
• Conduct secure‑code and application‑security reviews with developers.
• Support PCI DSS compliance and payment‑industry security controls.
• Coordinate vulnerability remediation and security patching with engineering.
• Carry out third‑party and vendor security assessments.
• Develop incident‑response procedures and assist in investigations.
• Maintain security logs, risk registers, and remediation documentation.
• Deliver employee cybersecurity awareness and phishing‑prevention training.

Required profile

• Proven experience in information security within FinTech or payments environments.
• Strong understanding of cloud security, API protection, and payment‑industry regulations.
• Ability to work collaboratively with cross‑functional teams.
• Excellent analytical and problem‑solving skills.

Required skills

• Penetration testing and vulnerability assessment.
• Web Application Firewall (WAF) implementation.
• IDS/IPS and SIEM platforms.
• Endpoint protection solutions.
• Identity and Access Management (IAM), MFA, RBAC.
• PCI DSS compliance.
• Secure cloud infrastructure configuration.
• Secure‑code review and application security.