{"id":1925272,"url":"https://alion.io/job/monese-security-engineer","title":"Security Engineer","company":{"id":51403,"name":"Monese","domain":"monese.com","url":"https://alion.io/company/monese","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Teamtailor","truth_index":{"grade":"A","score":100,"open_postings":3,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":4,"computed_at":"2026-10-15T05:46:00Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Tallinn, Estonia"],"countries":["EE"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":37000,"max_usd":89000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":714},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"AWS","optional":false},{"name":"CVSS","optional":false},{"name":"GDPR","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"PCI DSS","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"SOC 2","optional":false}],"status":"live","first_seen_at":"2026-10-05T08:14:13Z","employer_posted_date":"2026-10-05","last_verified_at":"2026-10-13T00:53:30Z","board_verified":false,"closed_at":null,"days_open":10,"trust":{"level":"ok","repost_count":1,"flags":[],"days_open":9},"description":"Location:Tallinn, Estonia\nEntity:Monese Estonian entity, supporting both Monese and Pockit\nTeam: Security\nReports to: Head of Security\nLevel:Mid-level, 3 to 5 years of relevant experience\nEmployment type:Full time, permanent\nAbout Pockit and Monese\nPockit and Monese are all-in-one money apps that make it easier for people to access and manage the financial tools they need to take control of their money.\nWe provide vital financial services, from accounts and cards to income advance solutions. In October 2024, Pockit acquired Monese, bringing together two complementary businesses and creating a leading fintech company focused on serving people who are underserved by traditional banks.\nTogether, we serve more than three million customers across the UK and Europe.\nWe're a diverse, international and energetic team, with colleagues based across London, Newcastle, Tallinn and remote teams across Central Europe. We value curiosity, ambition, accountability and resilience, and we want everyone to feel at home, have a voice and know that their contribution matters. We give people the trust and space to take ownership, share ideas, influence decisions, and make a real impact on our customers and our business.\nThe role\nWe are hiring a Security Engineer who will be part of the Security Team. This is not a policy-writing desk job and it is not a pure infrastructure role. You will implement and operate the technical controls that our regulatory obligations demand, prove those controls work with real evidence, and help engineering teams build in a way that keeps us compliant by default.\nThe job splits roughly three ways: finding and fixing vulnerabilities with our engineering teams, hardening our cloud and access controls, and turning DORA, PCI DSS, ISO 27001, FCA and GDPR requirements into controls that actually work rather than documents that merely exist.\nWhat you will do\nFind the vulnerabilities. Run scanning across cloud, endpoints, containers, code and dependencies, cut through the noise, and prioritise by real exploitability rather than raw CVSS score.\n\nGet them fixed. Work directly with engineering teams to agree fixes and dates, track remediation SLAs, chase what slips, and provide reporting and visibility..\n\nHarden the platform. Improve our AWS security posture, close misconfigurations, put guardrails into infrastructure as code, and keep secrets and pipelines secure.\n\nOwn access. Run identity and access governance end to end: joiners, movers and leavers, SSO and SCIM coverage, privileged access and periodic reviews.\n\nMake compliance real. Implement and evidence the controls behind DORA, PCI DSS, ISO 27001, FCA expectations and UK/EU GDPR, and automate the evidence so audits are a query rather than a fire drill.\n\nSupport detection and response. Work with our managed detection and response provider on alert quality and escalation, and play your part in incidents and the reviews that follow.\n\nTune log sources and detection rules, write new detection use cases, and keep alert quality high enough that what reaches us is worth looking at.\n\nAssess third parties. Run security due diligence on vendors, keep the ICT and supplier access register current, and handle inbound security questionnaires.\n\nWhat you will bring\n3-5 years in security engineering, security operations or technical security, ideally with some exposure to fintech, payments or another regulated environment.\n\nHands-on vulnerability management: running the tools, triaging the output, and persuading engineers to ship the fix.\n\nPractical cloud security experience, ideally AWS: IAM, networking, logging, encryption, and the misconfigurations that keep coming back.\n\nIdentity and access management in practice: SSO, SCIM provisioning, role design and access reviews.\n\nScripting and automation (Python, Bash or similar) to query APIs, gather evidence and remove manual toil.\n\nWorking familiarity with at least one of DORA, PCI DSS, ISO 27001, NIS2 or SOC 2, and the appetite to get fluent in the rest.\n\nThe ability to explain the same technical risk to an auditor and to a software engineer without changing the facts.\n\nHands-on SIEM and SOC experience: working with log sources, writing or tuning detection rules, triaging alerts, and running incidents through to resolution.\n\nWhy Join Us?\nMake a real difference: Work at the intersection of technology and financial inclusion, helping people take greater control of their money.\n\nHave a voice: Your ideas and perspective matter. You'll have the opportunity to influence decisions, take ownership and shape how we work.\n\nMake an impact: Work on initiatives that reach millions of customers across the UK and Europe.\n\nWork with great people: Join a diverse, international and ambitious team where collaboration and curiosity are encouraged.\n\nGrow with us: Be part of a fast-moving fintech where you'll have plenty of opportunities to learn, develop and make your mark.\n\nWhat benefits we offer\nWe want you to feel supported, valued and able to do your best work - both in and outside the office.\n25 days annual leave + public holidays, with an extra day for every year worked\n\nHealthcare: Private medical with Confido, sports compensation with Stebby or discount from a gym. \n\n10 paid sick days per year\n\nHybrid working + up to 30 days working abroad each year\n\nL&D budget + 10 paid learning days per year\n\nAnnual eyecare allowance\n\nEnhanced maternity, paternity and shared parental leave\n\nVIP Pockit & Monese accounts\n\nExtra paid days off for your birthday and wedding\n\nRegular social events and team activities\n\nMonthly recognition awards and Team of the Quarter\n\nShare options, depending on role and level\n\nEmployee referral bonus\n\nFree office parking\n\nThe use of AI tools or applications during interviews is not permitted.\nWe value a fair, transparent, and authentic recruitment process. Candidates are expected to participate in all stages of the interview process personally and to represent themselves accurately.\nThe use ofAI interview proxies, real-time AI co-pilots or answer-generation tools, deepfakes, impersonation, synthetic identities, or any other technology intended to misrepresent a candidate’s identity, skills, experience, or responses during the interview process is strictly prohibited.\nAny candidate found to be using such methods will beautomatically disqualified from the recruitment process.\nWe kindly ask all candidates to respect the time and effort invested by both sides and to approach the interview process with honesty, professionalism, and integrity. If you are genuinely interested in the opportunity, we look forward to meetingyou and learning about your own experience, skills, and perspective.","description_format":"text","description_chars":6694,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Annual leave","Hybrid work","Parental leave","Stock options"],"hiring_locations":[{"name":"Estonia","iso":"EE","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Digital Banks & Neobanks","Money Transfer & Remittances"],"lifecycle":[{"event":"open","at":"2026-10-05T19:37:33Z"},{"event":"close","at":"2026-10-10T03:46:20Z"},{"event":"reopen","at":"2026-10-12T07:57:52Z"}],"visa":[],"liveness":{"score":16,"band":"cold","label":"Long shot","p_open":0.9,"p_active":0.48,"p_room":0.368,"age_days":9,"expected_fill_days":4,"reasons":["conf:52","win:tail"],"computed_at":"2026-10-15T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/monese-security-engineer","json_url":"https://alion.io/job/monese-security-engineer.json","meta":{"generated_at":"2026-10-16T00:07:50Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":204,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-17T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":51403},"rest":"https://alion.io/mcp/rest/get_company?id=51403"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fmonese-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fmonese-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fmonese-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/monese-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fmonese-security-engineer"}]}