Security Engineer

Company Mission

Payhawk is one AI-powered spend management platform for scaling businesses — corporate cards, expense management, procurement, and accounts payable, unified in one place. We serve finance teams across 32+ countries, cutting month-end close time and reconciling 99.7% of transactions with zero manual touch. AI runs through the platform as core infrastructure, not a bolted-on feature — and we hire the top 1% of talent in every function to keep building it that way.

Why Payhawk
Payhawk, where the bold builders make an impact.

We're not a family, we're a high-performance team — and that's deliberate. We debate, ideate, and push each other to be better, because the best ideas come from direct feedback. We've already made history as Bulgaria's first unicorn, but the ambition doesn't stop there: if you want to grow fast - own it; do not wait for it.

Give: Honest opinions, real ownership, a focus on outcomes.
Get: A front-row seat to a market leader in one of the fastest-moving industries.

The role, in one line

You will help keep Payhawk's systems and data secure through proactive monitoring, vulnerability management, and incident response, while growing your technical skills in the IT & Security team.

What you will own

• Help implement, monitor, and maintain cybersecurity controls across the organization.
• Run regular vulnerability scans, analyze the results, and coordinate remediation with the relevant stakeholders.
• Provide technical support for system monitoring, patching, and troubleshooting, so endpoints stay secure and perform well.
• Support the configuration, management, and maintenance of our mobile device management (MDM) and endpoint protection platforms.
• Keep accurate, up-to-date records of endpoint management, asset inventories, and software configurations.
• Manage software deployments, operating system imaging, and patch compliance across enterprise endpoints.
• Work with other teams to maintain security baselines and respond to security incidents.
• Monitor, investigate, and respond to security alerts and incidents using SIEM and EDR tools, containing and mitigating them in good time.
• Document monitoring activities, incident response actions, and investigation outcomes in ticketing and case management systems.
• Take part in security awareness initiatives, and help promote best practices across the organization.
• Support the evaluation and implementation of new security tools, technologies, and automation scripts that improve efficiency.