Information Security Engineer

Microblink
Croatia +3 more
Remote

Who this role is best for

Geared toward candidates comfortable with vulnerability management and security frameworks, who thrive in a collaborative environment with global teams and flexible work arrangements.

Best fit for

  • Candidates with hands-on experience in vulnerability scanning and penetration testing, and a background in security frameworks like OWASP and MITRE ATT&CK
    — “familiar with security frameworks and standards such as OWASP Top 10, ASVS, SANS Top 25, and MITRE ATT&CK”
  • Individuals who can manage cross-functional collaboration with Product and Engineering teams to improve security posture
    — “work closely with Product & Engineering teams to limit the vulnerability attack surface”

Things to consider

  • The role may require adapting to evolving cybersecurity threats and compliance standards
    — “Stay informed about the evolving cybersecurity threat landscape”
  • Candidates should be prepared to engage in internal security awareness initiatives
    — “included in internal security posture and awareness raising activities”

How to stand out

  • Highlight experience in vulnerability management and bug bounty handling in your resume and interview responses
    — “handling bug bounty reports, assisting Engineering teams in impact analysis”
  • Emphasize your ability to define and streamline internal security policies and procedures
    — “Define vulnerability management policies, guidelines, and procedures”
  • Showcase your understanding of application and cloud infrastructure security as a core competency
    — “Understand security best practices related to application development and/or cloud infrastructure”
  • Demonstrate knowledge of ISO 27001 and SOC 2 compliance if applicable
    — “Are familiar with ISO 27001 and/or SOC 2 requirements”
  • Mention your proactive approach to threat analysis and mitigation strategies
    — “Analyze and evaluate potential threats, design and implement overall security solutions and mitigation strategies”
Pace · SteadyCollaboration · MediumAutonomy · MediumDecision Impact · Team

Derived from job-description analysis by Serendipath's career intelligence engine.

What success looks like

  • reduced security vulnerabilities
  • successful penetration tests
  • compliance with security standards
Typical background
information securityDevOps

Skills & requirements

Required

Information SecurityVulnerability ManagementPenetration TestingSecurity FrameworksCloud SecurityCi/cd Security

Preferred

ISO 27001SOC 2EncryptionRisk Management

Stack & domain

Information SecurityVulnerability ManagementPenetration TestingProblem SolvingTeamworkCommunicationCybersecurityInfrastructureProduct Security

About the role

Original posting from Microblink via Greenhouse

Here’s why this role matters to us:

We’re looking for someone passionate about information security to help strengthen the security posture of our infrastructure and products, and take ownership of our vulnerability management program.

The Information Security engineer would oversee our internal and external vulnerability management activities, conduct internal tests and scans, and work on resolution with Product & Engineering teams. This person would also be included in internal security posture and awareness raising activities, and efforts taken to comply with information security best practices, standards and regulation. A successful candidate has comprehensive knowledge of information security risks and threats, mitigation tactics, testing tools and protective solutions.

A little bit about us:

Microblink is the Identity Intelligence OS that establishes Know Your Actor: control over people and agents, how risk is assessed, and how decisions are made across digital journeys. Built for an adversarial AI era, Microblink replaces static verification with continuous identity control. As the only solution spanning IDs, biometrics, and payment cards, Microblink delivers a real-time command center where signals, policies, and decisioning can be calibrated with granular precision. Companies use Microblink to adapt faster than fraud, optimize outcomes over time, and enforce trust at scale across onboarding, authentication, and every moment in between. In 2025, Microblink processed 2.9 billion identities across 195+ countries. Its proprietary Fraud Lab generates 100,000+ images monthly for training and testing models, achieving 100% deepfake detection in DHS-powered testing.

Here’s what you’ll do:

Lead vulnerability management program by working closely with Product & Engineering teams to limit the vulnerability attack surface

Define vulnerability management policies, guidelines, and procedures, and streamline related internal and external reporting

Monitor IT infrastructure and analyze the state of our products to identify security vulnerabilities and take appropriate corrective actions (periodic vulnerability scans, analysis of found vulnerabilities, handling bug bounty reports, assisting Engineering teams in impact analysis)

Oversee the security part of our Secure Software Development Lifecycle

Analyze and evaluate potential threats, design and implement overall security solutions and mitigation strategies (security enhancing tools and infrastructure)

Help with the alignment of vulnerability and incident management processes with regulatory requirements and compliance standards

You’ll thrive in this role if you:

Bring solid experience in information security or DevOps roles

Understand security best practices related to application development and/or cloud infrastructure

Are familiar with security frameworks and standards such as OWASP Top 10, ASVS, SANS Top 25, and MITRE ATT&CK

Have hands-on experience with vulnerability scanning and penetration testing tools

Have a working knowledge of coding and CI/CD practices

An additional plus is if you:

Are familiar with ISO 27001 and/or SOC 2 requirements

Understand encryption algorithms, authentication, and authorization mechanisms

Stay informed about the evolving cybersecurity threat landscape

Bring experience in risk management and security incident management

Enjoy sharing knowledge and helping others build security awareness

Here’s what you’ll gain if you join us:

Become part of a global B2B SaaS identity company where your contributions truly make an impact - a high-performing, people-first culture that values growth, fosters learning, and rewards success.

Enjoy flexible work arrangements - work remotely, hybrid, or from one of our offices, depending on your preference.

Unlimited PTO to support work-life balance.

Region-specific benefits tailored to your location.

Equity.

How can you join us?

If this role intrigues you, do not hesitate to hit the apply button and send us your resume. We are excited to meet talented people even if you don’t feel that you match 100% of the requirements. 

So don’t let that discourage you, get in touch with us and we promise to get back to you.

Microblink LLC is an equal opportunity employer committed to diversity and inclusion in the workplace. This policy applies to all employment practices within our organization, from hiring to the end of your business relationship with us. Accordingly, this job advertisement is equally applicable to all people and Microblink will make a hiring decision based solely on qualifications, merit, and business needs. We prohibit discrimination of any kind based on race, color, sex, religion, sexual orientation, national origin, disability, genetic information, pregnancy, or any other protected characteristic as outlined by federal, state, or local laws, as well as our internal policies and culture.

For detailed information on how we process personal data, please read our Privacy Policy https://microblink.com/privacy-policy/ or reach out to our Data Protection Officer at privacy@microblink.com.

Source: Microblink careers (Greenhouse)

Similar roles