information security engineer for digital banking

Candescent is a technology company transforming how financial institutions deliver Intelligent Banking experiences through digital banking, account opening, and branch solutions across digital, remote, and in-person channels. Its API-first ecosystem combines human-centered design with data, automation, and cloud-based innovation.

• Design, implement, and manage Cloudflare security controls, including WAF, bot mitigation, rate limiting, and DNS protection;
• Strengthen web application security by identifying and mitigating common threats, including OWASP Top 10 vulnerabilities;
• Configure and maintain firewalls and network protection mechanisms for external and internal systems;
• Lead and support vulnerability remediation efforts by prioritizing and resolving identified risks cross-functionally;
• Protect distributed, cloud-based platforms through distributed systems security practices;
• Develop detection and mitigation strategies for credential stuffing prevention and bot-based attacks;
• Support incident response activities, including triage, investigation, containment, and post-incident reviews;
• Monitor and analyze security events using Cloudflare and other telemetry sources to identify threats and anomalies;
• Maintain and optimize DNS security configurations, including traffic routing and protection against DNS-based attacks;
• Collaborate with engineering teams to embed secure design principles into application development and deployment lifecycles.

• Bachelor’s degree in Computer Science, Cybersecurity, or a related field, or equivalent experience;
• 3–5 Years of experience in information security engineering or application security roles;
• Hands-on experience with Cloudflare, including WAF, Bot Management, DNS, and CDN security, or similar edge security platforms;
• Strong knowledge of web application security, firewalls and network protection, vulnerability management and remediation, and distributed systems and cloud security architectures;
• Experience managing or responding to incident response scenarios;
• Familiarity with credential stuffing detection and prevention techniques and bot management tools;
• Working knowledge of DNS protocols and security considerations;
• Strong analytical, problem-solving, and communication skills;
• Nice to have: Experience in FinTech, SaaS, or regulated financial environments, relevant certifications such as CISSP, CEH, Security+, GIAC, or Cloudflare certifications, experience implementing zero trust architectures, familiarity with DevSecOps practices and CI/CD security integrations, exposure to fraud prevention or digital banking security use cases.

• No conditions specified