Experienced Security Engineer

Who is Silverflow? At Silverflow, we’re redefining payments. As the world’s first cloud-native acquiring processor, we’re replacing decades-old infrastructure with a fast, scalable, global platform. Founded in 2019, we’re founder-led, venture-backed, and growing fast. With 80+ dynamic colleagues from over 30 different cultures, we are on track to reach 120 people by 2027. Our platform empowers a diverse range of clients, from banks to ride sharing platforms, helping them streamline operations, enhance data insights, and deliver seamless, real-time payment experiences at scale. What you'll do We are looking for an Experienced Security Engineer to join our Silverflow team! Do you thrive when you can independently own security challenges across multiple domains and work collaboratively to enable others? Then this role is for you. You'll join our Security team in Amsterdam and contribute across the full breadth of operational security by: • Monitoring production environments and security infrastructure, investigating alerts, building and tuning detection rules in our SIEM, and maintaining dashboards that give the team and stakeholders real visibility into our security posture. • Translating compliance requirements (SOC 2, PCI-DSS) into technical controls, owning their implementation and evidence collection, and ensuring they remain effective, time. • Collaborating with colleagues across the organization to enable them to do their jobs securely, providing guidance, building self-service resources, and removing security bottlenecks. • Reviewing and managing access across our cloud and application environments, applying least-privilege principles, running access reviews, and improving our IAM posture as the company grows. • Helping scope and coordinate penetration tests (both internal efforts and external vendor engagements), tracking remediation, and communicating findings to engineering teams with clear context and priority. • Assessing the security posture of third-party vendors and new integrations, and advising teams on emerging risks, including AI/ML tools as they become more embedded in how we work and build. • Identifying manual or repetitive security tasks across our operations, and participating in automation efforts to reduce toil, improve response times, and help our security posture scale. Note: This role is focused on infrastructure, operational security, and corporate environments. It is not an Application Security (AppSec) position. Who you are You are someone who operates with autonomy and sound judgment, and who has: • 3-5 years of hands-on experience in a security operations or security engineering role, ideally in a cloud-native environment. • Solid experience with cloud platforms (AWS preferred), including understanding of IAM, networking, and infrastructure security in production environments. • The ability to translate compliance and regulatory requirements into practical technical controls, not just checking boxes, but understanding why a control exists and how to implement it effectively. • Hands-on experience with security tooling: SIEM, EDR, vulnerability scanners, or detection engineering platforms. You've built dashboards and detection rules, not just consumed them. • Proficiency in Python, Bash, or similar scripting languages for building automation and tooling that others on the team can rely on. • Strong communication skills: you can explain a security risk differently to a developer than to a finance manager, and write clear documentation or advisories that people can act on without follow-up. • A collaborative mindset: you enable colleagues to do their work securely by finding practical solutions that balance risk and business needs. As Silverflow is an office-first company, being located in the Netherlands and able to work onsite is required for this role. Nice-to-Have • Experience in payments, fintech, or another regulated industry where security operations directly support compliance obligations. • Relevant certifications (e.g., AWS Security Specialty, OSCP, or similar practitioner-level credentials). • Experience with penetration testing tools and methodologies. • Familiarity with AI/ML security risks and governance frameworks. • Familiarity with infrastructure-as-code and CI/CD pipeline security. Why join us? • A fun and people-first culture: Be part of a diverse team representing 30+ nationalities. Enjoy a daily team lunch, regular padel tournaments, and memorable annual events like our Christmas Party, company birthday celebrations, and off-site trip. We believe great work happens when people also have fun together. • Learn from the best: Work alongside highly experienced colleagues with deep knowledge across disciplines. There’s a lot of expertise in-house and endless prospects to learn, grow, and challenge yourself. • Room to shape your career: With strong growth ambitions, Silverflow offers plenty of opportunities to develop your career and grow alongside the company. • Strong mentorship & collaboration: We are a flat organization. You’ll work closely with experienced mentors, receiving hands-on guidance from people who genuinely care about your growth and development. • Fast-paced, friendly, and collaborative environment: Join a team that values new ideas and initiative, and doing things the right way, while moving fast and supporting each other along the way. • Great benefits from day one • Travel cost reimbursement • A competitive salary with annual increases • Stock options: share in the success you help create