About the job

As a Security Engineer at Flatpay, you’ll play a key role in strengthening our day to day security operations and improving our overall security posture. You’ll work at the intersection of security operations, user focused security, and Microsoft platform hardening.

This is an entry/mid level role with real ownership. You won’t just “monitor alerts”, you’ll run important security workflows end to end, help build structure around how we respond and improve, and partner closely with IT and engineering to keep Flatpay secure while we scale.
You’ll take ownership of core security processes, helping improve quality, consistency, and resilience - without slowing the business down.

You’ll collaborate closely with developers, IT, and business stakeholders to turn security requirements into practical improvements that work in the real world.

What you'll do

• Own and continuously improve our security awareness efforts (training, comms, and phishing resilience)
• Triage and handle reported phishing emails, including investigation, user follow-ups, and tuning of controls
• Perform smaller SOC assignments such as monitoring, basic incident triage, and lightweight investigations
• Manage our vulnerability management platform, triage findings, and drive remediation with development teams
• Help harden and secure our Microsoft environment, including Entra ID and M365 services such as Exchange, SharePoint, and Fabric
• Improve security posture through secure configuration, identity controls, and pragmatic best practices
• Help document and standardize processes so security work becomes repeatable and scalable at Flatpay

Who you are

You are early to mid in your security career and enjoy hands-on work that has real impact. You like combining technical problem solving with clear communication, and you’re comfortable owning workflows end to end - from investigating a reported phish to following up with the right teams and improving controls afterward.

You are curious, collaborative, and eager to learn. You don’t need to be the expert in everything, but you take initiative, ask good questions, and build good habits over time. You care about doing security in a way that supports the business - practical, structured, and continuously improving.

You communicate clearly in English and enjoy working cross functionally with both technical and non-technical stakeholders.

Technical skills
You do not need to be an expert in everything below, but you should have experience with some and a strong willingness to learn the rest.

• Security operations / incident triage fundamentals
• Phishing investigation and email security concepts
• Security awareness fundamentals  
• Vulnerability management and remediation workflows (CVE/CVSS understanding is a plus)
• Microsoft identity and platform security (Entra ID / AD basics)
• A structured mindset around documentation, runbooks, and repeatable processes

Tools and platforms you will work with

• Microsoft 365 platform (Entra ID, Exchange, SharePoint, Fabric and related services)
• AWS services (GuardDuty, Security Hub, IAM, Identity Center and related services)
• Our vulnerability management platform (and collaboration with developers on remediation)
• Email/phishing reporting workflows and security tooling

Foundational engineering practices

• Basic understanding of monitoring, logging, and incident response concepts
• Interest in improving security processes, documentation, and operational maturity

We’d still love to hear from you if…
You do not check every box but are excited about growing into a strong Security Engineer through hands-on ownership. You enjoy solving real security problems, improving processes over time, and working closely with others to make security practical and effective.

If you are curious, collaborative, and motivated to grow while helping shape Flatpay’s security operations, we encourage you to apply.

Why Flatpay?

Contact info