Information Security Engineer

Microblink is the Identity Intelligence OS that establishes Know Your Actor: control over people and agents, how risk is assessed, and how decisions are made across digital journeys. Built for an adversarial AI era, Microblink replaces static verification with continuous identity control. As the only solution spanning IDs, biometrics, and payment cards, Microblink delivers a real-time command center where signals, policies, and decisioning can be calibrated with granular precision. Companies use Microblink to adapt faster than fraud, optimize outcomes over time, and enforce trust at scale across onboarding, authentication, and every moment in between. In 2025, Microblink processed 2.9 billion identities across 195+ countries. Its proprietary Fraud Lab generates 100,000+ images monthly for training and testing models, achieving 100% deepfake detection in DHS-powered testing.

• →Lead vulnerability management program by working closely with Product & Engineering teams to limit the vulnerability attack surface
• →Define vulnerability management policies, guidelines, and procedures, and streamline related internal and external reporting
• →Monitor IT infrastructure and analyze the state of our products to identify security vulnerabilities and take appropriate corrective actions (periodic vulnerability scans, analysis of found vulnerabilities, handling bug bounty reports, assisting Engineering teams in impact analysis)
• →Oversee the security part of our Secure Software Development Lifecycle
• →Analyze and evaluate potential threats, design and implement overall security solutions and mitigation strategies (security enhancing tools and infrastructure)
• →Help with the alignment of vulnerability and incident management processes with regulatory requirements and compliance standards

• Bring solid experience in information security or DevOps roles
• Understand security best practices related to application development and/or cloud infrastructure
• Are familiar with security frameworks and standards such as OWASP Top 10, ASVS, SANS Top 25, and MITRE ATT&CK
• Have hands-on experience with vulnerability scanning and penetration testing tools
• Have a working knowledge of coding and CI/CD practices

• Are familiar with ISO 27001 and/or SOC 2 requirements
• Understand encryption algorithms, authentication, and authorization mechanisms
• Stay informed about the evolving cybersecurity threat landscape
• Bring experience in risk management and security incident management
• Enjoy sharing knowledge and helping others build security awareness

• Become part of a global B2B SaaS identity company where your contributions truly make an impact - a high-performing, people-first culture that values growth, fosters learning, and rewards success.
• Enjoy flexible work arrangements - work remotely, hybrid, or from one of our offices, depending on your preference.
• Unlimited PTO to support work-life balance.
• Region-specific benefits tailored to your location.
• Equity.

If this role intrigues you, do not hesitate to hit the apply button and send us your resume. We are excited to meet talented people even if you don’t feel that you match 100% of the requirements. 

So don’t let that discourage you, get in touch with us and we promise to get back to you.