Want to know if this job is worth applying to?
Greater London, England, United Kingdom
Hybrid
Ambition has no passport. That belief is why LemFi exists. We're the financial engine for people the world wasn't built to serve, the millions who move countries to build something better and find the financial system hasn't caught up with them yet. We started with remittances: the money people send home to the people they love. Now we run multi-currency accounts, Savings, eSIMs and Credit. Because staying connected to home and building somewhere new are not two separate things. They never were.
LemFi is building the financial infrastructure for people the world wasn't built to serve - cross-border payments, multi-currency accounts, savings, credit, and eSIMs across 21 countries and growing. Security is not a checkbox here; it is a core part of how we earn trust with customers, regulators, and partners in some of the most scrutinised payment corridors in the world.
This role sits at the intersection of security engineering, operations, and compliance. You will monitor and respond to real threats, extend our DLP and identity controls, run vulnerability management, and translate audit requirements (SOC 2, ISO 27001, PCI DSS, DORA) into working technical controls. One day you might be triaging a researcher submission through our Bug Bounty programme; the next you are scripting an automated compliance check or briefing a board-level vulnerability report. If you want to own a broad, meaningful security remit at a fast-scaling fintech rather than a narrow lane at a large bank, this is the role.
Monitor, triage, and respond to security alerts and incidents across cloud, endpoint, and SaaS environments - keeping detection tooling sharp and well-tuned.
Own and extend our Data Loss Prevention controls: policy tuning, coverage gap analysis, and coordinating endpoint rollout across the business.
Manage device compliance and identity workflows via MDM platforms, including scripting for group management, provisioning, and reporting through REST APIs.
Run vulnerability scanning and remediation tracking, and contribute to board-level reporting that gives leadership a clear, honest picture of risk.
Translate SOC 2, ISO 27001, PCI DSS, and DORA requirements into working technical controls, evidence collection processes, and automated compliance checks - and support external auditor engagements directly.
Operate LemFi's Bug Bounty and Responsible Disclosure programme: triage researcher submissions and coordinate remediation with engineering teams.
Build scripts and lightweight tools to cut manual security operations work, improve audit evidence quality, and use AI to accelerate wherever it adds genuine value.
2 to 5 years in a security engineering, security operations, or equivalent hands-on technical security role, ideally in fintech, payments, or another regulated industry.
Practical experience across at least some of: cloud security (AWS, Azure, or GCP), endpoint and MDM tooling, DLP platforms, identity and access management, and SIEM or alerting tools.
Scripting ability sufficient to automate workflows and integrate with REST APIs - you write the script, you don't just find it on Stack Overflow.
Working knowledge of at least one major compliance framework (SOC 2, ISO 27001, PCI DSS, or DORA); direct audit-support experience is a strong plus.
A clear written communicator who can produce control narratives, incident summaries, and stakeholder-facing documentation that non-technical people actually understand.
Comfortable with ambiguity and able to shift between hands-on engineering work and compliance or documentation in the same week without losing momentum.
Experience operating or running a Bug Bounty or Vulnerability Disclosure programme.
Exposure to building or contributing to a Security Trust Centre or external-facing security documentation.
Familiarity with DORA (Digital Operational Resilience Act) requirements in a practical, implementation context.
Your work here puts money back into families' pockets. That's the reward, and the weight of it. You'll take on some of the hardest problems in finance alongside people who do their best work when the stakes are real. We move fast and we expect a lot, because our customers can't afford for us to do otherwise. In return you get room to own real problems, global impact you can see, and a team that won't slow you down.
Bring grit and ownership and there's a place for them here. Ambition belongs here, come and show us yours.
Follow us on LinkedIn and Instagram and if you haven't already, download the app on the App Store or Google Play.
Don't feel that you're right for this role, but want to submit your interest in working for LemFi? You can join our talent community to stay in touch for future opportunities.
LemFi does not accept unsolicited CVs from recruitment agencies. We work only with agencies on our preferred supplier list, and only when we’ve asked them for their support. Any CVs sent to us outside this arrangement will not incur a fee.
