Cybersecurity Lead | Product Security Engineering

Xplor Technologies powers the experiences at the heart of everyday life. Through modern vertical software, embedded payments, and AI-powered capabilities, we help businesses in fitness, recreation, golf and club, field services, laundry, education, and other membership-based and service-based industries simplify operations, uncover insights, and elevate customer and member experiences.

About the opportunity

Join our Xplor Security team as a Product Security Engineering Lead to make a real impact on securing our products that serve everyday life verticals. We say that because we know that every conversation we have, every pipeline we build and every system we automate is another opportunity for us to elevate everyday life experiences for our customers and the people and communities they serve.

Reporting into the Director of Product Security Engineering - as part of the overall Xplor Cyber Threat Intelligence, Engineering & Response function, you'll help us build, automate and integrate Product Security services across key business verticals and into our Xplor brands, whilst serving as a Security expert for Engineering, Product and wider Technology teams.

Responsibilities & Duties

• Act as the primary product security engineer for key Xplor verticals with effective and frequent engagement with Engineering leadership and technical leads.
• Serve as the subject matter expert for the following Product Security domains:
  • Automate and maintain a security design review program (design reviews, threat modeling, release readiness, exceptions) scaled to product maturity and roadmaps.
  • Mobile security vulnerability identification, triage and remediations,
  • API security vulnerability identification, triage and remediations,
  • Product Security vulnerability management and reporting.
• Support product security incident readiness including SME Security knowledge, escalation, and alignment with incident response/SOC for product-driven issues.
• Build and manage AI-assisted tools effectively to automate Product Security workflows.
• Develop product security knowledge bases (such as threat models, DFDs, and Security patterns).
• Help manage a vulnerability management lifecycle for product findings (triage, prioritization, assignment, remediation verification, closure).
• Provide mentorship to team engineers, supporting the growth of their technical abilities and career progression.
• Collaborate with fellow Cyber teams to support activities that requires Product Security expertise and capacity.
• Cross-functional leadership, partner closely with:
  • Product and Engineering Teams on roadmap alignment and customer commitments to ensure Security elements are balanced.
  • Engineering management on Security delivery realities and investment trade-offs.
• Act as an escalation point when security, product, and delivery priorities conflict.
• Support Engineering teams and Security Champions, such as improving their understanding of Security best practices.

For this position, you'll work fully remote. You need to be based in NZ and have full working rights for this region.

What would make me a good candidate?

We are looking for curious and empathetic people. We also love to hear from people who are motivated by meaningful work, resonate with our four core values, have a positive outlook, are comfortable with ambiguity and thrive working in an ever-evolving and complex environment. We are inspired by meeting big picture thinkers and doers, people who can be both tactical and strategic, aim high and put people first in everything they do.

You'll need:

• 5+ years of Application Security and/or Security Engineering experience, with a Computer Science/Engineering degree or equivalent.
• Enterprise experience in providing product security advisory to engineering and stakeholder teams to influence security improvements and vulnerability remediations.
• Experience in secure design reviews, threat modeling and articulating key Security requirements to internal stakeholders.
• The ability to build, automate and manage tooling in SAST, DAST, EASM and other Security testing tools.
• Strong hands-on Cloud experience across AWS and Azure, with the ability to deploy and manage Security tooling.
• Fluency with AI-assisted development tools (Claude Code, Cursor, etc.) and the ability to leverage these where automation of Product Security workflows are required.
• Comfortable working on a 100% remote team and operating independently within an agile group

At Xplor, we believe the best innovation and ideas happen at the intersections of our differences - across cultures, generations, disciplines, and lived experiences. So even if you do not tick every box, we still encourage you to apply.

Values and Life at Xplor

Our five core values guide us from how we hire and recognise our team members to how we interact with our customers day to day:

• Find a better way
• Do the right thing
• Say it straight
• Win together
• Own the outcome

If these values sound like you, and describe people you want to work with, you will thrive at Xplor.

As an Xplorer, you will be part of a global network of talented colleagues who will support your success. We look for commonalities and shared passions and give people the tools they need to deliver great work and grow at speed.

Some of our perks and benefits are:

• Paid Parental Leave benefit programs
• #GiveBackDays/Commitment to social impact - 3 extra days off to volunteer and give back to your local community
• Ongoing dedication to Diversity & Inclusion initiatives such as D&I Council, Global Mentorship Program
• Access to free mental health support
• Flexible working arrangements

Ready to apply?

To start your application, please submit your resume and we will be in touch as soon as we can. Please include the word "moonshot" at the top of your message to the Hiring Manager so that we know you took the time to read our job ad.

We understand that diverse candidates have diverse needs. We welcome you to inform us of any additional needs related to completing your job application or participating in the interview process, via [email protected].

More about us

More than 130,000 businesses in 72+ countries rely on Xplor to run their day and get paid, processing over $47 billion in payments annually. Our connected ecosystem helps operators spend less time managing complexity and more time delivering the experiences that matter most.

Xplor is backed by world-class investors Advent International, Battery Ventures, and Silver Lake.

Good to know

We kindly ask you to apply through our careers portal or external job boards only. Please don't send your application via email. They will not be forwarded.

To learn more about us and our products, please visit xplor.com/careers/.

We also invite you to check out our Candidate FAQs for more information about our recruitment process xplor.com/recruitment-faqs/.

EEO and Artificial Intelligence

We believe in transparent hiring. We use an applicant tracking system that includes artificial intelligence enabled features to assist with the screening and assessment of job applications, such as candidate scoring or ranking. These tools support our recruitment process, but all hiring decisions are made by our recruitment team following human review. We do not rely on artificial intelligence to make final hiring decisions. Find our Candidate AI Usage guidelines here.

Xplor is dedicated to attracting, retaining and developing our people regardless of gender identity, ethnicity, sexual orientation, disability and age. Applications are encouraged from all sectors of the community and we particularly encourage speakers of Te Reo Māori or Pasifika languages to apply.

We are a 2024 Circle Back Initiative Employer - we commit to respond to every applicant.

We make it a priority to respond to every applicant.