Solidgate

Information Security Engineer

In short

Remote junior Information Security Engineer role at Solidgate, a fintech payments orchestration platform. Focuses on corporate security, access management, vulnerability management, incident response, and compliance (ISMS/PIMS/BCMS, ISO standards, GDPR, DORA). Requires 1+ year of InfoSec experience, hands-on use of at least one security tool (vulnerability scanner, IAM, phishing simulations, or XDR), and Upper-Intermediate English.

About the role
At Solidgate, our mission is clear: to empower outstanding entrepreneurs to build exceptional internet companies. We exist to fuel the builders — the ones shaping the digital economy — with the financial infrastructure they deserve. We're on a bold path: to become the #1 payments orchestration platform in the world. Clients include Bolt, Ajax, Nova Post, MEGOGO, and we are trusted by giants like J.P. Morgan. Ranked #2 in the "Employer of the Year 2026" award by Forbes Ukraine.
As our company scales, we are strengthening our Information Security team and are looking for an Information Security Engineer to support our corporate and operational security practices.
The mission of this role is to reduce the risk of compromise of corporate accounts, devices, and SaaS systems by:
•maintaining compliance with international security standards
•ensuring controlled and auditable access
•strengthening security awareness across the company
•supporting incident response
This role focuses on corporate security, access management, vulnerability management, and compliance, helping Solidgate stay secure, resilient, and audit-ready at all times.
Responsibilities
•Managing user access (granting, changing, and revoking rights)
•Supporting ISMS, PIMS, and BCMS: collect and update evidence and prepare for certifications and audits
•Working with security tools (vulnerability scanners, anti-phishing, and security awareness platforms), including initial triage of findings and filtering out false positives
•Maintaining asset and information security risk registers
•Jumping in on incident response and investigations
•Helping write and update information security policies and procedures
Requirements
•1+ year of experience in Information Security, or relevant professional education with hands-on practice
•Experience writing or updating security policies and procedures
•Understanding of access management basics: least privilege, RBAC, MFA/SSO, and access reviews
•Hands-on experience with at least one security tool: a vulnerability scanner, IAM, phishing simulations, or XDR
•English proficiency at Upper-Intermediate level or higher
•Ownership, attention to detail, and accountability
•Strong teamwork and communication skills
•Participation in security audits
•Familiarity with ISO 22301, ISO 27701, GDPR, or DORA
Conditions
•Build security that protects the business: own and evolve corporate security controls that safeguard our people, systems, and data at scale
•Shape how global companies move money
•Learn from top fintech pros and level up faster than anywhere else
•Flexible hours to balance studies and work
•30+ days off, unlimited sick leave, free office meals, health coverage, and Apple gear to keep you productive
•Courses, conferences, sports and wellness benefits
•Referral bonus for recommending hired candidates

Stop applying.
Get referred.

$10 in free credits

In just 60 seconds, fully on autopilot — Eraldt's AI agents read your CV, map the roles you fit, find live vacancies and the people who can refer you, write personal emails, and get you referred.

This isn't an application: your CV doesn't go to the company, and we don't promise a referral for this exact role.

Discover who else lands interviews on autopilot