Security Engineer

📋 Job Overview

We’re Littlepay - a growing fintech headquartered in Melbourne with operations in the UK, EU, LATAM, USA, and more recently, Australia. Our payments platform enables our customers to pay for public transport using any payment card, mobile wallet, or wearable device. Processing over USD 1 billion a year in 19 countries and continuing to expand globally, we’re proud to move more people through better payment experiences.

🏢 About Littlepay

We’re Littlepay - a growing fintech headquartered in Melbourne with operations in the UK, EU, LATAM, USA, and more recently, Australia. Our payments platform enables our customers to pay for public transport using any payment card, mobile wallet, or wearable device. Processing over USD 1 billion a year in 19 countries and continuing to expand globally, we’re proud to move more people through better payment experiences.

🎯 The Role

Reporting to the Head of Security, this role supports key functions across security operations and architecture, with a strong focus on enhancing threat detection capabilities and incident response.

This is an exciting opportunity for someone passionate about security and technology who is looking to deepen their expertise in threat detection and response. You’ll play a hands-on technical role in strengthening the resilience of Littlepay’s platform while contributing to the team’s broader security objectives.

✅ Key Responsibilities

• Build and tune detection logic within the SIEM using \"Detection-as-Code\" principles. Automate incident response playbooks via SOAR to reduce manual toil.
• Act as a technical escalation point for the SOC. Investigate security alerts, perform root cause analysis, and lead remediation efforts for security incidents.
• Partner with Platform Engineering to secure cloud infrastructure and remediate Infrastructure-as-Code (IaC) misconfigurations.
• Deploy and maintain the security stack, including EDR (Endpoint Detection and Response), WAFs, and Zero Trust gateways

📌 Required Qualifications

• 2 - 4 years of experience across multiple security domains
• Experience in engineering cyber security tools like SIEM/SOAR, EDR, firewalls, intrusion detection systems.
• Experience working in AWS.
• Security frameworks and methodologies - OWASP Top 10, MITRE ATT&CK, Cyber Kill Chain, etc
• Strong background in cyber security, with a strong understanding of cyber security principles.
• Proficient in scripting languages to automate SOC processes.
• Communication - we do a lot of communicating and strong written and verbal communication will be important
• Empathy - we’re a service provider, so having high empathy for our internal stakeholders is a big deal
• Passion for learning - we take learning and growth seriously and you’ll need to be down with that

🎁 Benefits

We love to look after our people. At Littlepay, you'll be part of an inclusive and diverse team that celebrates the differences and unique gifts we each bring to work.

You’ll have access to:

• A high trust working environment, with usage of cloud collaboration tools like Notion, Slack, Miro, Gmail and Jira that help us work together effectively
• Paid professional development (including conferences, courses, learning subscriptions, etc.)
• Harrison Assessments - our talent management provider that facilitates continuous professional development
• A variety of flexible leave options
• Meal vouchers
• A company-wide paid day off
• Our flexible public holiday program
• Flexible (hybrid) working conditions
• Wellbeing support- including a free School of Life subscription for all employees
• Our generous employee referral program
• Mid-year, quarterly, and end-of-year corporate and team events and workshops
• Short-term remote working arrangements
• International travel opportunities (dependent on role)

🛂 Visa & Eligibility

For those assigned to an office location, we generally expect a minimum two-day presence in the office each week. This may vary depending on your role, team, and location. For example, our team in Luxembourg works 4 days from the office, whereas our AU and UK teams currently work a minimum of 2 days onsite in our Melbourne/London offices. Some positions might require more frequent office attendance to support cross-functional collaboration, customer engagement, or specific team workflows. Your hiring manager will provide details relevant to your role.