Top Cybersecurity Jobs

Lead and scale a second-line technology risk assurance function for a regulated fintech. Manage assurance across IT controls, cloud infrastructure, IAM, CI/CD, APIs, databases, business continuity, and AI systems. Build automated control testing and remediation workflows using Python, SQL, AI agents, and continuous monitoring. Lead a technical assurance team, engage auditors and regulators, and communicate technology risk to engineering leaders, executives, and board-level committees.

Serves as the regional security compliance anchor for UAE operations, connecting local regulatory requirements with the global Information Security program. Designs and monitors security controls, policies, and procedures; manages audit evidence and documentation; applies AI and automation to compliance reporting; and partners with regulators, customers, vendors, engineering, legal, and business teams. Requires independent project execution, cloud security understanding, and expertise in PCI DSS, ISO 27001, SOC 2, information security audits, and financial services compliance.

Designs and implements product security controls, secure applications, infrastructure, detection strategies, and incident response workflows. Investigates threats using endpoint, network, cloud, telemetry, threat intelligence, and forensic evidence. Conducts threat hunting, tactical forensics, vulnerability assessments, and cybersecurity infrastructure improvements while partnering with Product, Engineering, and Infrastructure teams. The role also establishes security standards, improves resilience, and embeds security practices across Airwallex’s applications and services.

Lead development of AI-powered information security tools, internal infrastructure, threat-hunting and remediation systems. Build and maintain Kubernetes clusters, serverless workloads, ETL pipelines, and large-scale log-processing infrastructure. Partner with engineering teams to automate security outcomes, support incident response, and reduce risk. Mentor software engineers and independently own technical roadmaps and project delivery.

Lead development of AI-powered information security tools, infrastructure, and applications. Build and maintain Kubernetes clusters, serverless workloads, ETL systems, and large-scale log pipelines. Develop threat hunting, remediation, security scanning, and patching automation tools while partnering with engineering teams to reduce risk. Mentor software engineers and independently deliver high-quality security projects.

Serve as a strategic and operational partner to the CISO by leading InfoSec planning, operating reviews, metrics, risk management, workflows, dashboards, knowledge management, and cross-functional security programs. Establish change-management and continuous-improvement practices, translate technical risks into executive decisions, and build, coach, and manage a team of Technical Program Managers.

Detect, investigate and remediate security incidents across corporate IT. Perform digital forensics and hunting, design and deploy corporate security controls and alerts, secure identity providers, endpoints and networks, and operate security tooling to prevent malware, phishing and unauthorized access.

Lead product security and incident response efforts: design and deploy security controls, hunt and investigate threats using endpoint/network/cloud telemetry, build detections and workflows, perform forensics, and partner with engineering to remediate vulnerabilities and improve secure design.

Designs and operates product security controls, secure applications and infrastructure, detection and incident-response workflows, threat hunting, forensic investigations, and vulnerability remediation. Partners with Infrastructure, Product, and Engineering teams to embed security across systems and services. The role also analyzes cloud, endpoint, and network telemetry and improves cybersecurity resilience, response capabilities, and secure development practices.

Serve as the regional GRC lead for Mexico City (or San Francisco), managing regional regulatory relationships, implementing and monitoring security controls, maintaining security documentation, driving automation for compliance, and executing hands-on security work while partnering with global InfoSec and business teams.