Security Engineer

Security EngineerAbout ExpanseFT

ExpanseFT is a payment-processing company with a cloud-native platform and responsibilities under the Payment Card Industry Data Security Standard (PCI DSS). We run a hybrid environment spanning multiple cloud providers and an on-premises data center, and we operate a mature security program with an active incident-response capability, formal change control, and annual third-party assessment.

We're a small, senior, engineering-first team — you'll have significant scope and ownership from day one.

The Role

We're hiring our first dedicated Security Engineer. You'll report to the EVP, Platform & Technology (who currently covers this function) and you'll become the primary operator of our day-to-day security program.

Translation: this is a hands-on, queue-owning role, not a policy-writing or architecture-only role. You'll investigate alerts, tune detections, run vulnerability cycles, coordinate audits, execute access reviews, and own the evidence trail that keeps our compliance program defensible.

What You'll Do

• Own the daily security operations queue — triage and investigate alerts and findings across our cloud SIEM, XDR, EDR, and cloud-security-posture tooling. Drive each to closure with documented evidence.
• Operate the vulnerability management lifecycle — quarterly external scans (ASV), internal authenticated scans, container and Lambda scanning, dependency alerts, and penetration-test follow-through. Track remediation against SLA.
• Administer endpoint protection across our endpoint fleet — agent deployment, policy tuning, detection quality, and threat response.
• Run the access-review program — periodic user, privileged, service-account, and third-party access reviews across our identity providers; terminated-user revocation verification; provisioning and deprovisioning execution.
• Lead incident response as the primary responder for security events — conta