{"id":1316761,"url":"https://alion.io/job/candescent-information-security-engineer-ii","title":"Information Security Engineer II","company":{"id":2113992,"name":"Candescent","domain":"candescent.com","url":"https://alion.io/company/candescent-com","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":75,"open_postings":15,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-09-28T05:45:00Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Belgrade, Serbia"],"countries":["RS"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":36000,"max_usd":90000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":414},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"Cloudflare","optional":false},{"name":"DNS","optional":false},{"name":"GCP","optional":false},{"name":"OWASP Top 10","optional":false}],"status":"live","first_seen_at":"2026-07-21T00:00:00Z","employer_posted_date":"2026-07-21","last_verified_at":"2026-09-27T20:03:55Z","board_verified":true,"closed_at":null,"days_open":70,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":70},"description":"Candescent is a forward-thinking technology company transforming how financial institutions deliver Intelligent Banking experiences. We unite digital banking, account opening, and branch solutions that power and connect digital banking, account opening, and branch solutions-creating seamless engagement across digital, remote, and in-person channels.\nOur Experience-Led, Intelligence-Driven approach combines human-centered design with data, automation, and cloud-based innovation. Built on an API-first architecture, our extensible ecosystem enables institutions to adapt quickly, integrate easily, and unlock new opportunities for growth-turning every customer interaction into a moment of clarity, confidence, and connection.\nCandescent is seeking a motivated and technically skilledInformation Security Engineer IIto help strengthen and scale our application and edge security capabilities, with a focus onCloudflare-based controls.\nThis role is responsible for designing, implementing, and maintaining security solutions that protect customer-facing applications and distributed systems. The ideal candidate will bring hands-on experience inweb application security, DNS security, and firewall protection, along with a strong understanding of modern threat vectors includingcredential stuffing and distributed attacks.\nYou will partner closely with engineering, infrastructure, and incident response teams to proactively identify vulnerabilities, respond to threats, and enhance the organization’s overall security posture in a cloud-first, FinTech environment.\nKey Responsibilities and Deliverables:\nDesign, implement, and manageCloudflare security controls, including WAF, bot mitigation, rate limiting, and DNS protection\nStrengthenweb application securityby identifying and mitigating common threats (e.g., OWASP Top 10 vulnerabilities)\nConfigure and maintainfirewalls and network protection mechanismsto safeguard external and internal systems\nLead and supportvulnerability remediation efforts, working cross-functionally to prioritize and resolve identified risks\nProtect distributed, cloud-based platforms through strongdistributed systems securitypractices\nDevelop detection and mitigation strategies forcredential stuffing prevention and bot-based attacks\nSupportincident response activities, including triage, investigation, containment, and post-incident reviews\nMonitor and analyze security events using Cloudflare and other telemetry sources to identify threats and anomalies\nMaintain and optimizeDNS (Domain Name System) security configurations, including traffic routing and protection against DNS-based attacks\nCollaborate with engineering teams to embed secure design principles into application development and deployment lifecycles\nQualifications and Experience:\nBachelor’s degree in Computer Science, Cybersecurity, or a related field (or equivalent experience)\n3-5 years of experience ininformation security engineering or application security roles\nHands-on experience withCloudflare (WAF, Bot Management, DNS, CDN security)or similar edge security platforms\nStrong knowledge of:Web application security\nFirewalls and network protection\nVulnerability management and remediation\nDistributed systems and cloud security architectures\n\nExperience managing or responding toincident response scenarios\nFamiliarity withcredential stuffing detection/prevention techniques and bot management tools\nWorking knowledge ofDNS protocols and security considerations\nExperience in cloud environments (AWS, Azure, or GCP preferred)\nStrong analytical, problem-solving, and communication skills\nPreferred Distinctions:\nExperience inFinTech, SaaS, or regulated financial environments\nRelevant certifications (e.g.,CISSP, CEH, Security+, GIAC, Cloudflare certifications)\nExperience implementingzero trust architectures\nFamiliarity withDevSecOps practices and CI/CD security integrations\nExposure to fraud prevention or digital banking security use cases\n\nStatement to Third Party Agencies\nTo ALL recruitment agencies: Candescent only accepts resumes from agencies on the preferred supplier list. Please do not forward resumes to our applicant tracking system, Candescent employees, or any Candescent facility. Candescent is not responsible for any fees or charges associated with unsolicited resumes.","description_format":"text","description_chars":4307,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Financial Services","Credit Unions & Cooperative Banks"],"lifecycle":[{"event":"open","at":"2026-09-26T19:14:45Z"}],"liveness":{"score":13,"band":"cold","label":"Long shot","p_open":1,"p_active":0.354,"p_room":0.36,"age_days":69,"expected_fill_days":39,"reasons":["conf:9","stale_co","velocity","win:tail","crowd:"],"computed_at":"2026-09-28T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/candescent-information-security-engineer-ii","json_url":"https://alion.io/job/candescent-information-security-engineer-ii.json","meta":{"generated_at":"2026-09-29T03:04:42Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","usage":{"tier":"crawler","counted_by":"address","units_charged":1,"used_today":2751,"day_limit":5000,"remaining_today":2249,"minute_limit":60,"resets_at":"2026-09-30T00:00:00Z"}}}