Juicyway

Security Engineer

• Conduct application security testing (Threat modelling, SCA, SAST, DAST) across web, mobile, and API platforms to identify vulnerabilities such as those in the OWASP Top 10
• Perform vulnerability assessments across internal and external networks, systems, and cloud infrastructure
• Execute penetration tests (black-box, gray-box, and white-box) against cloud environments (AWS, Azure, GCP), including IAM misconfigurations, storage exposure, container security, and serverless architectures
• Simulate real-world attack scenarios, including red team exercises, social engineering, and adversary emulation
• Analyze and validate findings from automated scanning tools to eliminate false positives
• Develop custom scripts, tools, or exploits to test specific attack vectors as needed
• Document findings in detailed technical reports with clear risk ratings, business impact, and remediation recommendations
• Present findings to technical teams and leadership in a clear, actionable manner
• Collaborate with engineering and DevOps teams to support secure coding practices and remediation efforts
• Stay current with emerging threats, attack techniques, CVEs, and cloud security research
• Contribute to the development of internal security testing methodologies, playbooks, and tooling
• Support compliance efforts (e.g., PCI-DSS, SOC 2, ISO 27001) through testing evidence and reporting

Offensive Security Specialist

Infrastructure Engineer

• Designing and building security controls across every layer of the stack; physical hardware, OS, Kubernetes, networks, and CI/CD pipelines - with sophisticated adversaries and insider threats as the design constraint
• Hardening our multi-cloud infrastructure end to end, network isolation, secret management, machine identity, checkpoint encryption, the unglamorous work that keeps real money safe
• Protecting our API services against common and emerging threats, from DDoS to the attacks that do not have names yet
• Securing and monitoring our distributed workforce device fleet; endpoint protection and robust IAM for a team that moves fast across multiple markets
• Partnering with engineering teams to deploy security enhancements at scale, embedding security into how we ship, not bolting it on after the fact
• Leading our compliance work; PCI DSS, SOC 1 and 2, routine penetration tests with external auditors, and making sure we don't just pass them, we believe in them
• Taking a generalist approach to emerging workloads, balancing deep security expertise with the broad technical range to adapt as the infrastructure evolves
• Building the security culture across the engineering org, not by policing, but by making secure instincts the default

Senior Security Engineer, Infrastructure Security

Engineer

• Define, maintain, and govern event tracking architecture and taxonomy across web, mobile, CRM, and backend systems
• Ensure consistent and reliable event tracking across all customer touchpoints
• Improve funnel visibility from install through repeat transaction
• Monitor, debug, and reconcile discrepancies between backend transactional data and analytics tools
• Own implementation, governance, and ongoing optimisation of AppsFlyer and mobile attribution infrastructure
• Improve attribution accuracy across paid and organic channels
• Establish reliable and trusted channel performance reporting
• Eliminate blind spots in acquisition and activation measurement
• Maintain source attribution consistency across acquisition, lifecycle, and reporting systems
• Design and maintain growth data pipelines and warehouse integrations across PostgreSQL, Segment, Mixpanel, Customer.io, AppsFlyer, Firebase, Power BI, and future warehouse infrastructure
• Own source-of-truth consistency and reliable syncing across transactional systems, analytics platforms, CRM platforms, warehouses, and reporting environments
• Ensure data quality and consistency across all connected platforms
• Partner with Engineering and Data teams to improve data accessibility and reliability
• Build and maintain internal growth tooling used by Marketing, Lifecycle, Commercial, and Operations teams
• Enable and maintain lifecycle event triggers and CRM automation architecture within Customer.io
• Own push notification infrastructure including Firebase FCM migration, token management, delivery reliability, and in-app messaging
• Monitor and improve push notification delivery, open rates, token health, and engagement performance across Android and iOS
• Ensure real-time data availability for lifecycle campaigns and segmentation
• Improve deep-linking reliability across web and mobile
• Improve lifecycle orchestration across onboarding, activation, engagement, retention, and reactivation journeys
• Build and iterate on referral systems, rewards and gamification infrastructure, and onboarding flows
• Develop activation nudges, lifecycle triggers, and engagement features directly within the product
• Ship and test growth features quickly in close collaboration with Product and Design teams
• Support implementation of loyalty and retention systems including Juice Points
• Build and maintain A/B testing infrastructure, feature flagging, and experimentation frameworks
• Enable rapid testing across onboarding, activation, lifecycle, referral, and retention programmes
• Improve experimentation velocity across Growth and Product teams
• Establish best practices for measurement, experimentation, and learning loops
• Own technical visibility and reporting across Install, Signup, KYC, First Transaction, and Repeat Usage
• Identify friction points and collaborate with Product and Growth teams to improve conversion performance
• Improve visibility into customer drop-off points, behavioural patterns, and conversion opportunities

Offensive Security Specialist

Senior Security Engineer, Infrastructure Security

Attribution & Instrumentation Engineer