Senior Security Engineer

Salary: £63,000 - 103,000 per year

Requirements:

• 5+ years in security engineering with a demonstrable track record of shipping platforms, not just performing reviews or writing policy.
• Production Go experience; you should be comfortable designing, writing, testing, and shipping production Go services. Our platform is Go-native and we build our security tooling in the same stack. Applications without production Go will not progress.
• Software engineering fundamentals, including version control, code review, testing, CI/CD, observability, and on-call for services youve built.
• Hands-on experience with payment HSM services, including cloud-hosted services such as VirtuCrypt, AWS CloudHSM, or Google Cloud HSM, or on-prem operated as a service.
• Payment key management experience, including PIN keys, DUKPT, master/session key hierarchies, and TR-31 or TR-34 key exchange.
• Experience with key lifecycle management and PCI PIN and PCI-DSS scope.
• Application security at scale, including SAST/DAST/SCA toolchain design and rollout and threat modelling as a routine practice.
• Familiarity with modern AppSec tooling such as Snyk, Wiz, Veracode, Checkmarx, Semgrep, GitHub Advanced Security, or equivalents.
• Cloud security depth on AWS, including IAM design, workload identity, network isolation, and integration patterns between application workloads and HSM-backed key services.
• Strong written communication skills to publish runbooks, standards, ADRs, and reporting dashboards.
• Comfort working in a small team carrying real regulatory scope, including PCI-DSS, PCI PIN, DORA, and GDPR constraints.
• Open source contributions or side projects are nice to have, as we would like to see how you write code before the technical interview.
• Payments industry experience, including card acquiring, issuing, PIN, EMV, or terminal fleet operations, is nice to have.
• Regulated fintech environment experience, such as FCA, ECB, or equivalent supervisory scope, is nice to have.

Responsibilities:

• Design, implement, and continuously improve a Secure SDLC integrated from design through production.
• Embed security into planning and delivery through threat modelling, security requirements, and automated controls.
• Lead application security reviews for new systems, major features, and high-risk changes across web, API, mobile, and backend services.
• Define and maintain secure architecture patterns for authentication, authorisation, APIs, data protection, and multi-tenant isolation.
• Own the application security tooling stack, including SAST, DAST, and SCA, and integrate it into CI/CD with high-signal, low-noise outputs.
• Partner with engineers to triage and remediate vulnerabilities based on exploitability, impact, and regulatory risk.
• Work with Security Operations to improve application-level logging, telemetry, and incident response readiness.
• Act as a trusted advisor to engineering teams through practical guidance, documentation, and targeted training.
• Build production-quality Go services and turn manual security work into platforms other teams operate against.
• Work in a joint operating model with platform and infrastructure teams to address current coverage gaps in payment cryptography operations, application security at scale, and pipeline-embedded controls.

Technologies:

• API
• AWS
• Backend
• CI/CD
• Cloud
• Cryptography
• Embedded
• GitHub
• HSM
• IAM
• Support
• Mobile
• Network
• Security
• Web
• DMS
• REST

More:

We are Teya, building a financial platform for local businesses across Europe that helps cafés, restaurants, salons, shops, and entrepreneurs run their businesses with confidence. We move fast, care about quality, and value genuine hospitality alongside great performance. This Senior Security Engineer role sits within our Engineering team and is based in London, Porto, or Riga in a hybrid working environment. We offer flexible working hours, health insurance, physical and mental health support through MyFitness, 25 days of annual leave plus bank holidays, opportunities to visit other Teya offices when travel is safe and appropriate, Friday lunch in the office, friendly and high-end work equipment, and an informal office environment. We are committed to being an equal opportunity employer and to creating an inclusive workplace where everyone can thrive.

last updated 35 week of 2026