Security Engineer — Product Security

Paybis is a crypto and fiat infrastructure company founded in 2014. We serve 8.6M+ users in 180+ countries and process $3B+ a year. We hold MiCA CASP and Payment Institution licences from the Bank of Latvia, with passporting across the EU and EEA. We were named Best Crypto Payments Provider 2026 at the AIBC Awards. Our On-Ramp product lets wallets, exchanges, DeFi projects and fintechs embed crypto buying and selling directly into their own apps.

 We are building our Security Operations function together with an incoming CISO. You will own product security for our On-Ramp product end to end: threat modelling, detection, incident response, and secure-by-design improvements. Once that is stable, the role expands into application security across all our product lines.

• Own security of the On-Ramp product and coordinate everything related to it.
• Detect, investigate and respond to fraud and abuse, using logs, behaviours and signals.
• Run threat modelling and turn findings into concrete improvements with the engineering team.
• Build detection, SIEM rules and incident playbooks.
• Review code for security weaknesses (OWASP, business logic flaws) and support incident response, including attack reproduction and RCA.
• Introduce secure coding standards and security automation in CI/CD (SAST, SCA, IaC scanning).
• Help shape the Security Operations roadmap together with the CISO.

First month

• Get a deep understanding of the On-Ramp architecture and our security processes.
• Become the main point of coordination for On-Ramp product security.
• Deliver your first improvements to monitoring and detection.

Months 2–3

• Create an improvement plan for On-Ramp security and drive it with the engineering and product teams.
• Handle incidents consistently, with clear communication and solid root cause analysis.
• Present a structured security status to senior management and set clear security KPIs.



By month 6

• The On-Ramp security process is stable and predictable.
• You start expanding into application security across our other products.
• You shape the Security Operations roadmap together with the CISO.

• A strong background in application security or backend development.
• Hands-on experience with at least one of Python, Go, Node.js, Java or PHP.
• Deep knowledge of the OWASP Top 10, CWE and business logic vulnerabilities.
• Threat modelling experience: STRIDE, attack trees, misuse cases.
• Manual testing with Burp Suite, ZAP or custom scripts, plus SCA/SAST/DAST/IAST experience.
• Hands-on incident response: log analysis, attack reproduction, RCA.
• Experience with SIEM and writing playbooks; a Purple Team mindset.
• AWS security basics, container security (Docker, Kubernetes) and IaC scanning.
• Ownership, calm under pressure, and clear communication with engineers.



Nice to have

• Experience in crypto, fintech or on/off-ramp products, and an understanding of their threat landscape.
• DevSecOps and security automation.
• API and microservices security.
• Abuse detection, bot protection and rate limiting.
• Familiarity with DORA and MiCA security requirements.

• Remote-first work in the Latvian time zone (EET/EEST).
• Performance-based bonus.
• Medical insurance.
• L&D budget.
• English classes.
• Regular team events.
• Real ownership: help build a security function from the ground up in a regulated EU crypto company.
• Direct work with the CTO, minimal bureaucracy and fast decisions.

Hiring process

HR screening → technical interview → interview with engineering leadership → optional final interview.

If you want to own product security for a live crypto product used by millions, and help build a security function from the ground up, we’d love to hear from you. Send us your CV and a few lines about the security work you’re most proud of. We review every application and will get back to you quickly.