{"id":2032057,"url":"https://alion.io/job/repay-senior-security-engineer","title":"Senior Security Engineer","company":{"id":2422893,"name":"REPAY","domain":"repay.com","url":"https://alion.io/company/repay-com","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Atlanta, United States","United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":114000,"max_usd":209000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":256},"experience_years_min":4,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"DLP","optional":false},{"name":"Linux","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"Windows","optional":false},{"name":"CloudFormation","optional":true},{"name":"CVSS","optional":true},{"name":"EPSS","optional":true},{"name":"KEV","optional":true},{"name":"LLM","optional":true},{"name":"PCI DSS","optional":true},{"name":"SOC 2","optional":true},{"name":"Terraform","optional":true}],"status":"live","first_seen_at":"2026-09-02T00:00:00Z","employer_posted_date":"2026-09-02","last_verified_at":"2026-10-10T22:42:00Z","board_verified":true,"closed_at":null,"days_open":39,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":39},"description":"ABOUT REPAY\nREPAY (“Realtime Electronic Payments” / NASDAQ TICKER: RPAY) is an established and fast-growing publicly traded financial technology and payment processing company headquartered in Atlanta, Georgia, with offices across the country. REPAY enables its customers to accept payments anytime, anywhere, and through any channel while providing a secure, seamless, and enjoyable payment experience for the end consumers. REPAY offers a comprehensive suite of electronic payment and funding solutions, including debit and credit card processing, ACH processing, Instant Funding, and electronic bill payment systems with full IVR, text, and mobile capabilities. The scalability of its products allows merchants of all sizes to add an instant arsenal of intelligent payment technology solutions to their businesses without significant development costs or infrastructure investments.\nABOUT THE ROLE\nREPAY is seeking a highly motivated, self-driven Senior Security Engineer to join our Security Operations team. This role sits at the center of our Security Operations Center (SOC) - monitoring and triaging security event queues, conducting proactive threat hunting, and driving incidents from detection through containment and remediation. You will partially own and continuously improve our response playbooks and procedures, build and maintain the automation and integrations that reduce repetitive operational work, operationalize new detections, and assist with vulnerability management as needed.\nYou will also use and train our agentic SOC platform, applying AI-driven workflows to improve triage quality and reduce time to detect and respond. This role participates in the 24/7 weekly on call rotation and partners closely with IT, cloud engineering, network, and application teams to coordinate response actions and remediations. The ideal candidate is a curious, hands-on investigator who is comfortable making decisions under pressure, communicates clearly during active incidents, and turns every incident into a lasting improvement.\nRESPONSIBILITIES\nSecurity Monitoring and Triage\nMonitor and triage security event and alert queues across SIEM, EDR/XDR, identity, email, cloud, and network telemetry, ensuring timely and accurate disposition.\nInvestigate alerts to determine scope, impact, and root cause, escalating confirmed incidents according to defined severity criteria.\nParticipate in the 24/7 weekly Security Operations on call rotation, providing timely response to high priority security alerts, incidents, and escalations.\nDocument investigative findings, decisions, and evidence to a standard that supports audit, legal, and post-incident review needs.\nThreat Hunting\nConduct proactive, hypothesis-driven threat hunts across endpoint, network, cloud, identity, and SaaS environments.\nLeverage threat intelligence, MITRE ATT&CK, and adversary tradecraft to surface activity that evades existing detections.\nProduce hunt reports covering findings, detection gaps, and recommended improvements.\nIncident Response, Playbooks, and Procedures\nExecute incident response activities including triage, investigation, containment, eradication, and recovery.\nOwn the development, maintenance, and testing of response playbooks, runbooks, and standard operating procedures.\nLead or contribute to post-incident reviews, tracking corrective actions to closure and updating playbooks based on lessons learned.\nSupport tabletop exercises and purple team activities to validate detection and response readiness.\nResponse Actions Using Security Tooling\nTake containment and remediation actions using enterprise security tooling, including EDR/XDR host isolation and response, SASE/SSE policy enforcement, secure email gateway (SEG) and DLP rule tuning.\nRequest, review, and implement firewall and network access rule changes to block malicious activity and reduce exposure.\nAgentic SOC Enablement\nUse the agentic SOC platform in daily operations to accelerate alert triage, enrichment, and investigation.\nValidate AI-generated conclusions and recommended actions, ensuring appropriate human oversight and governance of automated response.\nTrain, tune, and provide structured feedback on agent workflows, prompts, and knowledge sources to improve accuracy and reduce false positives.\nSecurity Engineering\nDesign and implement automation for repetitive operational tasks such as enrichment, ticket creation, evidence collection, triaging, and response actions (containment and remediation).\nBuild and maintain automated playbooks and integrations across security and IT platforms using APIs and scripting.\nTrack operational metrics such as time to detect, time to respond, and false positive rate, and use them to prioritize automation work.\nUpdate or configure security platforms or infrastructure hosting them using IaC. \nOperationalize new detections identified through threat hunting.\nDesign and implement security control improvements to address risks and gaps in security monitoring and defense.\nVulnerability Management Support\nAssist with vulnerability management activities including scan review, validation, risk-based prioritization, and remediation tracking.\nCorrelate vulnerability data with threat intelligence and evidence of active exploitation to inform remediation urgency.\nPartner with IT, infrastructure, and development teams to drive remediation and verify closure.\nCross-Team Coordination\nCoordinate response actions and remediations with IT, cloud engineering, network, application development, and business teams.\nCommunicate incident status, impact, and required actions clearly to both technical and non-technical stakeholders.\nWork collaboratively with end users to assist with and resolve security events or concerns they report.\nMentor junior engineers and strengthen shift handoff quality, documentation, and knowledge sharing across the team.\nSKILLS & EXPERIENCE NEEDED\nQualifications:\nBachelor’s degree in Computer Science, Information Systems, or a related field, or equivalent practical experience.\n4-7+ years of experience in a SOC, incident response, threat hunting, security engineering, or security operations roles.\nHands-on experience investigating alerts in a SIEM (Splunk Enterprise Security preferred) and working within EDR/XDR platforms.\nStrong understanding of attacker techniques, MITRE ATT&CK, malware behavior, phishing, identity-based attacks, and cloud abuse patterns.\nWorking knowledge of networking fundamentals, operating system internals (Windows, Linux, macOS), and cloud platforms (AWS and/or Azure).\nFamiliarity with firewall rules, proxy and SASE/SSE policies, and DLP concepts in the context of incident response.\nExperience with Python, PowerShell, or similar scripting languages for automation and API integration.\nAbility to write and maintain clear playbooks, procedures, and incident documentation.\nWillingness and ability to participate in a 24/7 weekly on call rotation.\nSound judgment under pressure, strong written and verbal communication skills, and a bias toward continuous improvement.\nPreferred Skills:\nExperience using or tuning agentic AI or LLM-based tooling to support SOC triage, investigation, and response.\nExperience with automation (SOAR, Agentic) platforms and detection-as-code or automation-as-code practices.\nExperience using IaC (i.e. Terraform or CloudFormation) to manage and deploy infrastructure or security tools.\nExposure to vulnerability management tooling and risk-based prioritization frameworks such as CVSS, EPSS, and the CISA KEV catalog.\nExperience in a regulated environment such as payments, financial services, or fintech, with exposure to PCI DSS, SOC 2, or similar frameworks.\nExperience with digital forensics, log and memory analysis, or malware triage.\nRelevant certifications (e.g., GIAC GCIH, GCIA, GCFA, GCTI, GDAT, Splunk Core/Power User, CompTIA CySA+, AWS/Azure Security).\nWHY JOIN REPAY.… BECAUSE CULTURE IS EVERYTHING\nGROWTH & PEOPLE-CENTERED LEADERSHIP\nAs the industry-leading financial technology provider in the Consumer Finance and Business to Business spaces, we continue to set the standard for application development and delivery. In 2019, REPAY became a public company listed on the Nasdaq Stock Market (RPAY). For the past three consecutive years, we have placed on the ACG® Atlanta Georgia Fast 40, a list recognizing the top 40 fastest-growing middle-market companies in Georgia. REPAY’s leadership empowers each team member to make a difference and stretch to their fullest potential. Our dedication to frequent, transparent communication is shown with companywide meetings where our leaders share company vision and encourage employees to ask questions.\nFUN WORK ENVIRONMENT & GREAT TEAMS\nWe offer it all: business to casual dress, great snacks & beverages, and open-air collaborative team settings. REPAY has been certified as a Great Place to Work® company for 2017, 2018, 2019, 2020, 2021, and 2022. The REPAY team is fun, smart, collaborative, and truly enjoys working together. Making a difference in our local communities - we support several philanthropic initiatives every year to give back to our local communities. We are self-driven, motivated professionals who do not require micro-management to ensure we produce high quality and timely work.\nINNOVATION & EDUCATION\nWe create highly sophisticated payment processing applications and are always pushing the boundaries of what is possible. We are constantly revolutionizing the industry by building on new ideas from clients and employees. We provide the resources necessary to ensure new innovations can develop quickly and with quality. We encourage continuing education, including professional conferences and events.\nPUTTING OUR PEOPLE FIRST\nWe believe our people are the best, and we care immensely about their success. We offer a comprehensive benefits package which includes 100% coverage of employee healthcare premiums and several free benefits, including life insurance, disability insurance, and work-life balance resources. All benefits go into effect day one. Our employees’ futures are important to us, which is why we have a 401(k)-employer match and and an Employee Stock Purchase Plan. REPAY employees are eligible to participate in our Annual Bonus Program. This bonus award reflects excellent performance of individual contributions and goals achieved during the past year.\nREPAY’s core values are Excellence, Passion, Innovation, Respect, and Integrity.\nREPAY is an Equal Opportunity Employer and we promote a company culture where diversity, equity and inclusion are central. We are committed to build our teams and grow a company in which employees can succeed, regardless of race, color, national origin, sex, sexual orientation, gender identity or expression, transgender status, pregnancy, religion, age (40 and over), disability, service in the uniformed services, protected veteran status, genetic information, or any other classification protected by federal, state or local law. Celebrating our diverse backgrounds, views and beliefs allows us to embrace what makes us unique and continue to innovate and push the boundaries of what is possible.\nWe are interested in every qualified candidate who is eligible to work in the United States. This position is not eligible for hire in California. Additionally, we are not able to sponsor visas.","description_format":"text","description_chars":11367,"description_truncated":false,"requirements":{"experience_years_min":4,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Equity","Life insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Blockchain & Crypto","Financial Services","Payment Processing & Gateways"],"lifecycle":[{"event":"open","at":"2026-10-07T14:37:02Z"}],"visa":[],"liveness":{"score":66,"band":"ok","label":"Likely open","p_open":1,"p_active":0.884,"p_room":0.75,"age_days":38,"expected_fill_days":40,"reasons":["conf:4","velocity","win:late"],"computed_at":"2026-10-10T05:45:15Z"},"pay":null,"html_url":"https://alion.io/job/repay-senior-security-engineer","json_url":"https://alion.io/job/repay-senior-security-engineer.json","meta":{"generated_at":"2026-10-11T03:15:52Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler","counted_by":"address","units_charged":1,"used_today":749,"day_limit":5000,"remaining_today":4251,"minute_limit":60,"resets_at":"2026-10-12T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2422893},"rest":"https://alion.io/mcp/rest/get_company?id=2422893"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Frepay-senior-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Frepay-senior-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Frepay-senior-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/repay-senior-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Frepay-senior-security-engineer"}]}