Senior Security Engineer

Senior Security Engineer

REPAY ("Realtime Electronic Payments" / NASDAQ TICKER: RPAY) is an established and fast-growing publicly traded financial technology and payment processing company headquartered in Atlanta, Georgia, with offices across the country. REPAY enables its customers to accept payments anytime, anywhere, and through any channel while providing a secure, seamless, and enjoyable payment experience for the end consumers. REPAY offers a comprehensive suite of electronic payment and funding solutions, including debit and credit card processing, ACH processing, Instant Funding, and electronic bill payment systems with full IVR, text, and mobile capabilities. The scalability of its products allows merchants of all sizes to add an instant arsenal of intelligent payment technology solutions to their businesses without significant development costs or infrastructure investments.

REPAY is seeking a highly motivated, self-driven Senior Security Engineer to join our Security Operations team. This role sits at the center of our Security Operations Center (SOC) — monitoring and triaging security event queues, conducting proactive threat hunting, and driving incidents from detection through containment and remediation. You will partially own and continuously improve our response playbooks and procedures, build and maintain the automation and integrations that reduce repetitive operational work, operationalize new detections, and assist with vulnerability management as needed.

You will also use and train our agentic SOC platform, applying AI-driven workflows to improve triage quality and reduce time to detect and respond. This role participates in the 24/7 weekly on call rotation and partners closely with IT, cloud engineering, network, and application teams to coordinate response actions and remediations. The ideal candidate is a curious, hands-on investigator who is comfortable making decisions under pressure, communicates clearly during active incidents, and turns every incident into a lasting improvement.

Responsibilities

• Security Monitoring and Triage
• Threat Hunting
• Incident Response, Playbooks, and Procedures
• Response Actions Using Security Tooling
• Agentic SOC Enablement
• Security Engineering
• Vulnerability Management Support
• Cross-Team Coordination

Skills & Experience Needed

• Bachelor's degree in Computer Science, Information Systems, or a related field, or equivalent practical experience.
• 4–7+ years of experience in a SOC, incident response, threat hunting, security engineering, or security operations roles.
• Hands-on experience investigating alerts in a SIEM (Splunk Enterprise Security preferred) and working within EDR/XDR platforms.
• Strong understanding of attacker techniques, MITRE ATT&CK, malware behavior, phishing, identity-based attacks, and cloud abuse patterns.
• Working knowledge of networking fundamentals, operating system internals (Windows, Linux, macOS), and cloud platforms (AWS and/or Azure).
• Familiarity with firewall rules, proxy and SASE/SSE policies, and DLP concepts in the context of incident response.
• Experience with Python, PowerShell, or similar scripting languages for automation and API integration.
• Ability to write and maintain clear playbooks, procedures, and incident documentation.
• Willingness and ability to participate in a 24/7 weekly on call rotation.
• Sound judgment under pressure, strong written and verbal communication skills, and a bias toward continuous improvement.

Preferred Skills

• Experience using or tuning agentic AI or LLM-based tooling to support SOC triage, investigation, and response.
• Experience with automation (SOAR, Agentic) platforms and detection-as-code or automation-as-code practices.
• Experience using IaC (i.e. Terraform or CloudFormation) to manage and deploy infrastructure or security tools.
• Exposure to vulnerability management tooling and risk-based prioritization frameworks such as CVSS, EPSS, and the CISA KEV catalog.
• Experience in a regulated environment such as payments, financial services, or fintech, with exposure to PCI DSS, SOC 2, or similar frameworks.
• Experience with digital forensics, log and memory analysis, or malware triage.
• Relevant certifications (e.g., GIAC GCIH, GCIA, GCFA, GCTI, GDAT, Splunk Core/Power User, CompTIA CySA+, AWS/Azure Security).

Why Join REPAY… Because Culture Is Everything

Growth & People-Centered Leadership

Fun Work Environment & Great Teams

Innovation & Education

Putting Our People First

REPAY's core values are Excellence, Passion, Innovation, Respect, and Integrity.

REPAY is an Equal Opportunity Employer and we promote a company culture where diversity, equity and inclusion are central. We are committed to build our teams and grow a company in which employees can succeed, regardless of race, color, national origin, sex, sexual orientation, gender identity or expression, transgender status, pregnancy, religion, age (40 and over), disability, service in the uniformed services, protected veteran status, genetic information, or any other classification protected by federal, state or local law. Celebrating our diverse backgrounds, views and beliefs allows us to embrace what makes us unique and continue to innovate and push the boundaries of what is possible.

We are interested in every qualified candidate who is eligible to work in the United States. This position is not eligible for hire in California. Additionally, we are not able to sponsor visas.