Security Engineer - Cyber Threat Adversaries

Company Description

At Xplor, we believe that helping people make the most of each day is the most rewarding way to spend ours.

We give small and medium-sized businesses cloud-based, intuitive technology solutions that enable them to manage all the hassles of running and growing a business, so business owners can get back to doing what they love. With Xplor Pay, we help businesses get paid quickly and securely – without hidden fees. We built the tech ourselves, and our platform delivers secure, transparent, fast, and accurate payments.

We are unified by our purpose of helping people to succeed. So, when you become part of our team, you also become part of the personal connection that strengthens the relationship people have with Xplor products.

Job Description

About the opportunity

Join our Central Technology Team to make a real impact every day. We say that because we know that every code line we write, every interface we design and every conversation we have, is another opportunity for us to enrich our customers’ experiences.

Our Senior Security Engineers contribute to the security of our platforms and applications. The role executes protection of our software assets and infrastructure platforms from threat modelling through to penetration testing, and incident response of our customer facing systems.

Some of the other responsibilities include:

• Preserve the confidentiality, integrity and availability of our information so that it can be safely shared and used to drive our growth and innovation - enabling information confidence
• Implementation of Application and Platform Security, enabling safe and confident product development in partnership with our developers
• Empower our people to be security assets - our first line of defense against the threats to our information security
• Guidance to junior team members on TTPs and novel approaches
• Assist Cyber Threat Response with incident investigations and aid in technical risk assessments
• Coordinate with system development and infrastructure units to identify Cyber risks and the appropriate controls for development, day-to-day operation, and emerging technologies
• Perform regular security assessments including web applications , APIs and mobile apps based on changes in the threat landscape
• Monitor vulnerability assessments and ethical hacks, ensuring that issues are addressed for the applications that they support
• Provide information security support with related activities during systems development (e.g. authentication, encryption)
• Identify and develop new and improved technical procedures and process control manuals
• Identify significant Cyber threats and vulnerabilities
• Assume informal/formal mentorship role within teams and assist with the coaching and training of new team members
• Appropriately assess risk when business decisions are made, demonstrating particular consideration for the firm's reputation and safeguarding Xplor, its customers and assets, by driving compliance with applicable laws, rules and regulations, adhering to Policy, applying sound ethical judgment regarding personal behavior, conduct and business practices, and escalating, managing and reporting control issues with transparency.

About our Central Technology team

At Xplor, we have many different products and technologies. We have evolved from a bunch of start-ups to a single company with over 700 Xplorers who work in our CT team as one team across the world. You can find everything from super modern to older languages. We continue to iterate on our processes and technologies to find common ground between the different projects and product we have.

With this, we rely heavily on our engineers to be dynamic. Xplor is not the company (yet) where you’ll always have well-defined requirements and rigid processes. Our Engineers have a lot of input into the process and requirements. However, there can be challenges and ambiguity you as an Engineer have to overcome – and we know that’s not for everyone. The positive side of this is that you get to have a lot of say and ownership in the product and the process.

Qualifications

What would make me a good candidate?

We are looking for people who want to make a difference in Security.

Required qualifications for this role:

• 2 – 4 years’ experience in Security, IT, or Software Development
• Strong desire to learn new skills and figure out how things work
• Familiar with Cloud Services and Technology Infrastructure
• Critical thinking of the status quo
• Proactive, self-motivated learner with a strong drive to achieve personal goals
• Ability to work with remote teams (local, regional and international)
• Comprehension of Infrastructure as Code and general coding ability
• Strong at written communications and reporting
• Willing to develop knowledge across threat hunting and purple team skills

Desired Qualifications:

• Experience of Dev/Sec/Ops deployments and an understanding of the technologies involved
• Understanding of penetration testing technologies, approaches and methods
• Desire to learn mobile application testing skills
• Knowledge of Security Operations Center processes
• Understands native cloud technologies
• Knowledge of Python, C#, PHP or Java
• Knowledge of MSSQL, MySQL, Redis, PostgreSQL

Technical certifications and qualifications that this role will develop:

• Dev/Sec/Ops e.g., CDP / CDE 
• Web application penetration testing e.g., eWPT / eWPTX / OSWE 
• Platform penetration testing e.g., eCPPT / OSCP / OSEP 
• Red team / purple team e.g., CRTO / CRTP 

Note: we support our people with training, education and hands-on experience in the certifications and qualifications we need. 

At Xplor, we believe that the best innovation and ideas happen at the intersections of our differences - people of diverse cultures, generations, disciplines, and lived experiences. So even if you think you do not tick all the boxes, we still encourage you to apply.

Additional Information

Values and Life at Xplor

Our four core values that guide us from how we hire and recognize our team members to how we interact with our customers day to day:

Make life simple

Build for people

Move with purpose

Create lasting communities

If these values sound like you, and describe people you want to work with, you will thrive at Xplor.

As an Xplorer, you will be part of a global network of talented colleagues who will support your success. We look for commonalities and shared passions and give people the tools they need to deliver great work and grow at speed.

Ready to apply?

To start your application, please submit your resume and we will be in touch as soon as we can. Please include the word "moonshot" at the top of your message to the Hiring Manager so that we know you took the time to read our job ad.

We kindly ask you to apply through our careers portal or external job boards (LinkedIn, Naukri, Indeed, etc) only. Please don't send your application via email. They will not be forwarded. 

More about us 

Xplor Technologies is a global platform integrating SaaS solutions, embedded payments, and Commerce Accelerating Technologies to help businesses succeed. Xplor provides enterprise-grade SaaS solutions for businesses in “everyday life” verticals: Childcare & Education; Fitness & Wellbeing, Field Services and Personal Services – and a global cloud-based payment processing platform.

Xplor Technologies serves over 78,000 customers that processed over $36 billion in payments, operating across 20 markets in 2022. 

Good to know

To be considered for employment, you must be legally authorised to work in the location (country) you're applying for. Xplor does not sponsor visas, either at the time of hire or at any later time. 

To learn more about us and our products, please visit www.xplortechnologies.com/us/careers. 

We also invite you to check out our Candidate FAQs for more information about our recruitment process www.xplortechnologies.com/us/recruitment-faqs.

Xplor is committed to providing equal opportunities in employment and creating an inclusive work environment. We provide equal opportunities to all our employees and to all eligible applicants for employment in our company. We do not unfairly discriminate on any ground, including race, religion, color, ancestry, marital status, gender, sexual orientation, age, nationality, ethnic origin, disability or any other category protected by applicable law.

We are a 2024 Circle Back Initiative Employer – we commit to respond to every applicant.