Cyber Security Engineer

About the job

This is a fully remote job, open to people in Sri Lanka.

Why qlub

The end of a great meal shouldn't be the slow part. Waiting for the check, finding someone to take payment, splitting a bill by hand. qlub removes that friction. Guests scan a QR code and pay in seconds. No app, no download, no waiting.

From Pay-at-Table and Digital Menus to Order-and-Pay, Payment Links, and SoftPOS terminals, we handle the full payment experience so restaurants can focus on what they do best: great hospitality. Less friction means faster table turnover, smoother operations, and higher profit.

We're a fast-scaling fintech backed by Mastercard, Mubadala, e& and Shorooq. $72M raised, live across multiple markets worldwide, and headcount doubled in the past year. We're building the teams that take us to the next stage.

The role

As qlub expands across markets, so do our security challenges. From protecting our payments platform to meeting regulatory requirements and earning customer trust, security plays a critical role in how we grow. We are looking for a Cybersecurity Engineer to own our day-to-day security compliance and customer assurance including maintaining security standards and certifications, managing audits and supporting customer security assessments.

This isn't a role limited to compliance checklists. You'll be part of our security team, working closely with engineering and teams across the business. You'll also have opportunities to contribute to threat detection, application security, cloud security and penetration testing. You'll have the freedom to solve real problems and make a visible impact on how we secure our platform.

Things move quickly here and not every challenge comes with a playbook. What matters is strong security fundamentals, curiosity, adaptability and the ability to figure things out and get things done.

What you’ll own

• Own day-to-day security compliance and ISMS activities across ISO 27001, PCI DSS, SOC 2 readiness and applicable regulatory requirements.
• Manage internal and external audits, certifications and assessments end to end including auditor engagement, evidence validation and corrective action closure.
• Own customer security questionnaires, due diligence and security assessments, working directly with business stakeholders and customer security teams.
• Maintain security policies, risk assessments and control documentation, assess control effectiveness and drive compliance findings to closure.
• Coordinate third-party security reviews, support data protection and security awareness activities and maintain continuous compliance monitoring.
• Contribute to security operations including SIEM/EDR monitoring, threat detection, incident investigations, cloud security and vulnerability management.
• Support application security and DevSecOps initiatives including secure SDLC practices, CI/CD security integration, SAST/DAST/SCA and vulnerability validation.
• Leverage automation and AI to streamline security assessments, compliance activities and operational workflows.

Who you are

• You take initiative, exercise sound judgement and drive work forward independently.
• You are curious, resourceful and quick to learn unfamiliar tools, technologies and frameworks.
• You communicate clearly, collaborate across teams and stay effective when priorities change.
• You actively embrace AI to solve problems, automate repetitive work and find smarter ways to get things done.

What you’ll need

• Bachelor’s degree in Information Security, Computer Science or a related field.
• 3+ years of hands-on experience in cybersecurity or information security, including security compliance, assurance or GRC.
• Hands-on experience maintaining an ISO 27001 ISMS, coordinating audits, validating controls and managing compliance evidence.
• Experience handling customer security questionnaires, due diligence assessments and working with auditors and cross-functional teams.
• Working knowledge of PCI DSS, security risk management and frameworks such as NIST CSF.
• Solid technical foundations in cloud and SaaS architectures, networking, identity and access management and web security including OWASP Top 10.
• Strong analytical, problem-solving and communication skills with fluency in English.
• Familiarity with AI-assisted tools for research, analysis and automation with the judgment to validate outputs and handle sensitive information responsibly.

Nice to have

• Experience in fintech, payments or cloud-based SaaS environments.
• Familiarity with UAE IA/NESA, SOC 2 or GDPR requirements.
• Experience with GRC platforms and security workflow automation.
• Hands-on experience with cloud security (AWS/GCP), SIEM/EDR platforms such as CrowdStrike/Splunk or detection engineering.
• Practical experience conducting web, API or mobile penetration testing.
• Relevant certifications such as ISO 27001 Lead Auditor, CISA, eWPTx or OSCP are valued.

What we offer

• Real ownership over products that impact millions of diners and thousands of restaurants globally

• The opportunity to solve challenging problems in payments, hospitality, and customer experience

• A fast-moving environment where great ideas quickly become reality

• Close collaboration with experienced operators, builders, and industry experts

• A chance to leave a visible mark on one of the fastest-growing restaurant technology companies globally

Ready to build? Join us and help shape how the world pays at the table. If that excites you, apply now.