Here’s why this role matters to us: We’re looking for someone passionate about information security to help strengthen the security posture of our infrastructure and products, and take ownership of our vulnerability management program.

The Information Security engineer would oversee our internal and external vulnerability management activities, conduct internal tests and scans, and work on resolution with Product & Engineering teams. This person would also be included in internal security posture and awareness raising activities, and efforts taken to comply with information security best practices, standards and regulation. A successful candidate has comprehensive knowledge of information security risks and threats, mitigation tactics, testing tools and protective solutions.

A little bit about us

Microblink is the Identity Intelligence OS that establishes Know Your Actor: control over people and agents, how risk is assessed, and how decisions are made across digital journeys. Built for an adversarial AI era, Microblink replaces static verification with continuous identity control. As the only solution spanning IDs, biometrics, and payment cards, Microblink delivers a real-time command center where signals, policies, and decisioning can be calibrated with granular precision. Companies use Microblink to adapt faster than fraud, optimize outcomes over time, and enforce trust at scale across onboarding, authentication, and every moment in between. In 2025, Microblink processed 2.9 billion identities across 195+ countries. Its proprietary Fraud Lab generates 100,000+ images monthly for training and testing models, achieving 100% deepfake detection in DHS-powered testing.

Here’s what you’ll do

• Lead vulnerability management program by working closely with Product & Engineering teams to limit the vulnerability attack surface
• Define vulnerability management policies, guidelines, and procedures, and streamline related internal and external reporting
• Monitor IT infrastructure and analyze the state of our products to identify security vulnerabilities and take appropriate corrective actions (periodic vulnerability scans, analysis of found vulnerabilities, handling bug bounty reports, assisting Engineering teams in impact analysis)
• Oversee the security part of our Secure Software Development Lifecycle
• Analyze and evaluate potential threats, design and implement overall security solutions and mitigation strategies (security enhancing tools and infrastructure)
• Help with the alignment of vulnerability and incident management processes with regulatory requirements and compliance standards

You’ll thrive in this role if you:

• Bring solid experience in information security or DevOps roles
• Understand security best practices related to application development and/or cloud infrastructure
• Are familiar with security frameworks and standards such as OWASP Top 10, ASVS, SANS Top 25, and MITRE ATT&CK
• Have hands-on experience with vulnerability scanning and penetration testing tools
• Have a working knowledge of coding and CI/CD practices

An additional plus is if you

• Are familiar with ISO 27001 and/or SOC 2 requirements
• Understand encryption algorithms, authentication, and authorization mechanisms
• Stay informed about the evolving cybersecurity threat landscape
• Bring experience in risk management and security incident management
• Enjoy sharing knowledge and helping others build security awareness

Here’s what you’ll gain if you join us

• Become part of a global B2B SaaS identity company where your contributions truly make an impact - a high-performing, people-first culture that values growth, fosters learning, and rewards success.
• Enjoy flexible work arrangements - work remotely, hybrid, or from one of our offices, depending on your preference.
• Unlimited PTO to support work-life balance.
• Region-specific benefits tailored to your location.
• Equity.

How can you join us?

If this role intrigues you, do not hesitate to hit the apply button and send us your resume. We are excited to meet talented people even if you don’t feel that you match 100% of the requirements.

So don’t let that discourage you, get in touch with us and we promise to get back to you.

Microblink LLC is an equal opportunity employer committed to diversity and inclusion in the workplace. This policy applies to all employment practices within our organization, from hiring to the end of your business relationship with us. Accordingly, this job advertisement is equally applicable to all people and Microblink will make a hiring decision based solely on qualifications, merit, and business needs. We prohibit discrimination of any kind based on race, color, sex, religion, sexual orientation, national origin, disability, genetic information, pregnancy, or any other protected characteristic as outlined by federal, state, or local laws, as well as our internal policies and culture.

For detailed information on how we process personal data, please read our Privacy Policy https://microblink.com/privacy-policy/ or reach out to our Data Protection Officer at privacy@microblink.com.

Solid experience in information security or DevOps; knowledge of security best practices, frameworks (OWASP, ASVS, SANS, MITRE), vulnerability scanning and penetration testing tools, coding and CI/CD.

Key Responsibilities

• managing vulnerability program
• conducting security scans
• implementing security solutions

Skills & Tools

OWASP Top 10, ASVS, SANS Top 25, MITRE ATT&CK, vulnerability scanning tools, penetration testing tools, CI/CD

Job Details

• Category: Information Technology
• Seniority: Mid Level
• Commitment: Full Time
• Workplace: Remote — Croatia or Serbia or Romania or Bulgaria
• Languages: English

Benefits

• Generous paid time off

About Microblink

An identity intelligence OS that establishes Know Your Actor and provides continuous identity control. — Industry: Information Technology