Job Overview
-
Date Posted
November 7, 2025
-
-
Job Description
Highway is a fintech company focused on building banking products. We have a highly motivated and skilled team with an excellent track record in finance and technology. By using the best technology and our expertise in finance and banking, we have built FinTech solutions that allow our customers to embed financial services into their products.
We are looking for a Cybersecurity Engineer, who will design, implement, and maintain technical security controls across infrastructure and applications. The role involves hands-on configuration, security automation, and collaboration with DevOps and development teams to ensure secure system and software design.
Key Responsibilities
- Design, implement, and maintain network and endpoint security solutions (firewalls, IDS/IPS, EDR, SIEM).
- Conduct vulnerability assessments, penetration tests, and system hardening for servers and cloud environments.
- Manage and support existing security platforms, ensuring alignment with company policies.
- Participate in the full incident response lifecycle-detection, containment, investigation, and recovery.
- Perform forensic and root cause analyses; drive improvements through automation and analytics.
- Implement and manage cloud security controls and infrastructure-as-code (Terraform, CloudFormation).
- Embed security practices into CI/CD pipelines and containerized environments (Docker, Kubernetes).
- Conduct application and API security testing (SAST, DAST) and collaborate with developers to remediate issues.
- Participate in secure design reviews and threat modeling for new products.
Qualifications
- Proven experience with network and system security tools (firewalls, IDS/IPS, EDR, SIEM).
- Solid understanding of security frameworks (ISO 27001, CIS Benchmarks) and best practices.
- Experience in cloud security (AWS, Azure, or GCP) and DevSecOps environments.
- Proficiency in scripting languages such as Python, Bash, or PowerShell.
- Familiarity with secure SDLC, AppSec tools (SAST, DAST), and CI/CD pipeline security.
- Hands-on experience in vulnerability management, incident response, and forensic analysis.
- Strong analytical, communication, and collaboration skills.
- Relevant certifications (Security+, CEH, or CySA+) are a plus.
Working Hours and Terms
Working Hours:
from 9:00 a.m. – 11:00 a.m. to 6:00 p.m. – 8:00 p.m. accordingly.
Workdays: Monday to Friday (5 working days).
Hybrid Schedule: 52 remote days per year, equivalent to one remote workday per week.
Employee Benefits
We offer an inclusive and comprehensive benefits package designed to support your personal and professional well-being:
- Paid Time Off: 6–8 days of paid time-off per year
- Training & Development Programs
- Team Activities
- Exclusive offers on partner bank services
