Senior Security Engineer

📋 Job Overview

Application
Ambition has no passport. That belief is why LemFi exists. We're the financial engine for people the world wasn't built to serve, the millions who move countries to build something better and find the financial system hasn't caught up with them yet. We started with remittances: the money people send home to the people they love. Now we run multi-currency accounts, Savings, eSIMs and Credit. Because staying connected to home and building somewhere new are not two separate things. They never were.

🏢 About LemFi

We move over $2B a month across 30+ countries for people who have built lives far from where they started. That makes us a target, in some of the most scrutinised payment corridors in the world, and attackers often go after the people and devices behind the product rather than the product itself. Here, security is an engineering problem first.

🎯 The Role

We're looking for a Senior Security Engineer in Dublin to own how we protect LemFi from the inside: every laptop, account, inbox and internal tool our teams rely on. You'll report directly to our CTO, build the controls, write the detections and run the incident when something gets through. It's a small team, so you'll write the playbook rather than follow one. There's compliance work at LemFi, but this seat is about stopping attackers and building controls, not running audits.

✅ Key Responsibilities

• Endpoint protection across all laptops and devices: EDR, device management, hardening and patching, configured so a compromised device is caught fast and contained faster.
• Identity and access across the company: SSO, MFA, privileged access, joiner and leaver flows, and access reviews that actually remove access.
• Email, collaboration and SaaS security, including phishing defence and visibility into the internal tools our teams use every day.
• Detection engineering and threat hunting across endpoint, identity and internal systems. Write the detections, tune out the noise, and hunt for what they miss.
• Incident response from first alert through forensics and root cause to the change that closes the gap for good.
• Threat intelligence on the actors targeting fintech employees and our corridors, turned into detections and controls rather than reports.
• Automation that removes manual work from triage, response and access management, using AI and ML wherever they make detection sharper.

📌 Required Qualifications

• At least 5 years of hands-on security work across incident response, detection engineering, threat intelligence or security engineering, with recent work you built and shipped yourself.
• Hands-on experience running endpoint protection or EDR at scale across Windows and macOS.
• Strong identity and access management experience with directories, SSO and MFA, such as Entra ID, Okta or Google Workspace.
• Led real incidents end to end, including forensic investigation on endpoints.
• Written detections in a SIEM that caught real activity, and kept false positive rates down.
• Write Python or Go well enough to build your own tooling and automate your own work.
• Practical use of AI or ML in security work: you can show where it helped, and you validate its output rather than trust it blindly.

⭐ Desirable Experience

• Experience in banking, payments or another regulated financial environment, or rolling out EDR, MDM or email security from scratch.
• Network security experience (firewalls, VPN, zero trust) or cloud security in AWS, particularly workforce access and logging.
• Purple team exercises mapped to MITRE ATT&CK, or knowledge of the threat landscape in African, LATAM or Asian payments markets.

🎁 Benefits

Your work here puts money back into families' pockets. That's the reward, and the weight of it. You'll take on some of the hardest problems in finance alongside people who do their best work when the stakes are real. We move fast and we expect a lot, because our customers can't afford for us to do otherwise. In return you get room to own real problems, global impact you can see, and a team that won't slow you down.

🛂 Visa & Eligibility

LemFi does not accept unsolicited CVs from recruitment agencies. We work only with agencies on our preferred supplier list, and only when we’ve asked them for their support. Any CVs sent to us outside this arrangement will not incur a fee.