Information Security Engineer

About the role

Here’s why this role matters to us:

We’re looking for someone passionate about information security to help strengthen the security posture of our infrastructure and products, and take ownership of our vulnerability management program.

The Information Security engineer would oversee our internal and external vulnerability management activities, conduct internal tests and scans, and work on resolution with Product & Engineering teams. This person would also be included in internal security posture and awareness raising activities, and efforts taken to comply with information security best practices, standards and regulation. A successful candidate has comprehensive knowledge of information security risks and threats, mitigation tactics, testing tools and protective solutions.

A little bit about us:

Microblink is the Identity Intelligence OS that establishes Know Your Actor: control over people and agents, how risk is assessed, and how decisions are made across digital journeys. Built for an adversarial AI era, Microblink replaces static verification with continuous identity control. As the only solution spanning IDs, biometrics, and payment cards, Microblink delivers a real-time command center where signals, policies, and decisioning can be calibrated with granular precision. Companies use Microblink to adapt faster than fraud, optimize outcomes over time, and enforce trust at scale across onboarding, authentication, and every moment in between. In 2025, Microblink processed 2.9 billion identities across 195+ countries. Its proprietary Fraud Lab generates 100,000+ images monthly for training and testing models, achieving 100% deepfake detection in DHS-powered testing.

Here’s what you’ll do:

- Lead vulnerability management program by working closely with Product & Engineering teams to limit the vulnerability attack surface

- Define vulnerability management policies, guidelines, and procedures, and streamline related internal and external reporting

- Monitor IT infrastructure and analyze the state of our products to identify security vulnerabilities and take appropriate corrective actions (periodic vulnerability scans, analysis of found vulnerabilities, handling bug bounty reports, assisting Engineering teams in impact analysis)

- Oversee the security part of our Secure Software Development Lifecycle

- Analyze and evaluate potential threats, design and implement overall security solutions and mitigation strategies (security enhancing tools and infrastructure)

- Help with the alignment of vulnerability and incident management processes with regulatory requirements and compliance standards

You’ll thrive in this role if you:

- Bring solid experience in information security or DevOps roles

- Understand security best practices related to application development and/or cloud infrastructure

- Are familiar with security frameworks and standards such as OWASP Top 10, ASVS, SANS Top 25, and MITRE ATT&CK