Staff Security Engineer

Job description

At PPRO, we simplify access to local payments - providing a local payments platform that empowers giants like PayPal, Stripe, and Microsoft to connect with billions of consumers worldwide. We are on an ambitious, fast-paced mission to 3x our growth by 2028 - and we’re just getting started. Our magic lies in our team of proud payments nerds. Spanning over 50 nationalities across 10+ global locations, our diverse cultures aren't a checklist; they are the competitive advantage driving our innovation. This is a people-first, high trust environment where you’ll have the autonomy to make a massive impact, own your work end-to-end, and grow through broad exposure, meaningful challenges, and continuous learning. We get things done, challenge respectfully, put the customer first, and recognise that our biggest successes are those we create as a team. If you’re ready to leave your footprint on global commerce, join us. **The Purpose:** As Staff Security Engineer at PPRO, you’ll act as the technical lead for the Security Engineering (SecEng) team, driving technical and operational excellence while coaching and developing your colleagues. You’ll be pivotal in supporting our mission to build robust, secure, and resilient systems. This role offers the opportunity to apply deep security expertise across application and cloud domains. You will serve as the primary technical interface between the SecEng team and engineers across the organisation, influencing architecture and guiding teams to embed a 'secure by design' philosophy in everything we build. You will build Security as Code solutions that enable consistent controls and high-velocity delivery. You will also perform security assessments for new projects and technologies, utilizing threat modeling to identify risks early and define standardized, repeatable security patterns for the wider engineering organization. If you thrive on finding win-win solutions that embed security into modern development workflows to safeguard our customers, this is a great opportunity to have a positive impact at scale across the payments ecosystem. ### What you’ll do: - Act as technical lead for the Security Engineering team, setting technical direction, coaching and mentoring other security engineers. - Partner with Engineering teams to integrate security principles, practices, and tools into all stages of the software development lifecycle. - Design and build reusable Security as Code artefacts and patterns that reduce developer friction while improving security outcomes. - Conduct threat modeling exercises and security assessments to identify and address risks in critical applications and systems. - Write Hardening Standards and Security Guidelines for various technologies and processes. - Develop automations for recurrent and manual tasks around auditing activities, cloud security posture management (CSPM) and other security processes. - Maintain and expand our IaC codebase and CI/CD pipelines. - Champion the use of AI to streamline security operations, scaling our defensive capabilities and enabling non-security teams to adopt security-first practices. - Collaborate on cross-functional security projects, enhancing PPRO’s security posture at scale. - Continuously monitor emerging security trends and technologies to drive proactive improvements. ### What we look for in you: - A natural technical leader: able to guide, coach and mentor engineers, lead cross-team collaborations, and act as a trusted interface between security and the wider engineering organisation. - You view AI as an essential force multiplier; you are a power user who actively leverages modern AI/LLM frameworks to both accelerate your own workflows and build scalable security solutions. - Solid understanding of software engineering fundamentals, secure software development best practices and security architecture. - Strong expertise in AWS (GCP is a bonus) and container security (e.g. Kubernetes). - Deep understanding of DevSecOps and CI/CD security controls, with hands-on experience in Infrastructure as Code (preferably Terraform), CI/CD pipelines (preferably GitHub Actions) and scripting (Python, bash). - Results-oriented, highly collaborative, pragmatic and proactive, and with a continuous improvement mindset. - Strong interpersonal and communication skills, able to unblock teams and foster security awareness throughout the company.