Marqeta
Pick a job to read the details
Tap any role on the left — its description and apply link will open here.
Senior Security Engineer - Cloud Identity
Share this job
We’re seeking an experienced Senior Security Engineer with a strong passion for Identity and Access Management(IAM) and proven expertise in cloud-native environments, particularly AWS. In this role, you’ll help shape and implement modern identity strategies to secure access across all of Marqeta’s systems and services—100% cloud-based, with no data center footprint.
Join us in building a secure, scalable, and frictionless IAM program where you’ll play a crucial part in:
- Building and evolving our Identity Governance and Administration (IGA) capabilities.
- Implementing & Operating Privileged Access Management (PAM) in a cloud-first (AWS-focused) environment.
- Designing and architecting a Certificate Lifecycle Management solution that supports cloud-native workloads.
- Driving integration of IAM across AWS services, SaaS platforms, and developer/DevOps pipelines.
- Designing identity and access controls to protect AI/ML systems—ensuring secure access to training data, models, and inference APIs.
The Impact You’ll Have
- Develop and lead implementation of robust IAM strategies aligned with cloud-native architecture and security principles.
- Expand and operationalize the IAM program across IGA, PAM, SSO, MFA, access management, secrets management, and certificate lifecycle.
- Automate identity provisioning, de-provisioning, and access reviews using AI tools and infrastructure-as-code.
- Design IAM integrations for AWS-native services (Lambda, EC2, S3, IAM, etc.), SaaS platforms, and third-party identity tools (e.g., Okta, CyberArk).
- Promote and enforce least privilege and zero-trust principles through scalable access controls and policy automation.
- Mentor junior engineers and serve as a technical lead for IAM-related projects.
- Collaborate with Security, DevOps, and Infrastructure teams to embed IAM controls across the engineering lifecycle.
- Stay ahead of emerging trends and continuously refine IAM strategy based on evolving cloud threats and compliance requirements.
Who You Are
- A minimum of 8 years related experience with a Bachelor’s degree; or 5 years and a Master’s degree; or a PhD with 3 years’ experience; or equivalent combination of related education and work experience.
- Strong experience with IAM tools (e.g., Okta, CyberArk, Ping, SailPoint).
- Deep knowledge of IAM in cloud-native environments, especially AWS IAM, roles, policies, permissions boundaries, and federation.
- Proficiency in infrastructure-as-code (e.g., Terraform, CloudFormation).
- Familiarity with authentication and authorization protocols (SAML, OAuth2, OpenID Connect, Kerberos).
- Strong grasp of directory services like Active Directory, LDAP, and cloud-based alternatives.
- Hands-on skills in scripting (e.g., Python, PowerShell) to automate IAM operations.
- Solid understanding of compliance standards: NIST, SOC 2, PCI DSS, etc.
- Proven experience integrating IAM into CI/CD pipelines, secrets management, and DevOps workflows.
- Excellent communication skills and ability to influence and lead cross-functional teams.
Nice to have
- Relevant certifications such as CISSP, CISM, or IAM-specific credentials (e.g., CIAM/CAMS, CyberArk Certified, Okta Certified Consultant).
- Experience with AWS technologies such as Lambda, S3, DynamoDB, RDS, Aurora, SNS, SQS, CloudTrail, CloudWatch, Code Pipeline, AWS Developer Tools, and IAM roles and permissions
- Experience with DevOps tools and practices, including secrets management and CICD pipelines
Manager
Recruiter for this role
- Kayla Osuna
Compensation and Benefits
Marqeta is a Flex First company which allows you to choose your best working environment, whether that be from home or at a company office. To support Flex First, we calibrate pay to a competitive value according to working location.
When determining salaries, we consider several factors including, but not limited to, skills, prior experience, and work location. The new-hire base salary range for this position, reflected in CAD, is: 136,800 - 171,000
We also believe in recognizing the contributions of our people. That's why we award annual bonuses to eligible employees, rewarding both individual performance and the success of the entire company.
Along with monetary compensation, Marqeta offers
- Multiple health insurance options
- Flexible vacation time
- Retirement savings program with company contribution
- Equity in a publicly-traded company
- Monthly stipend to support our remote work model
- Annual “development dollars” to support our people growth and development
- Family-forming benefits and up to 20 weeks of Parental Leave
About Marqeta
Marqeta is on a mission to change the way money moves. We’re one of the earliest enablers of embedded finance, a market opportunity sized up in the trillions. Our card issuing platform provides unprecedented flexibility and control for companies to issue cards, authorize transactions, and manage payment operations in real time. Marqeta is powering the most well known brands in the new economy (Block, Cash App, Affirm, Instacart, Doordash, Uber, Walmart, etc). You don’t need to be a Payments expert to join the Marqeta Team, let us help you with that. This is the opportunity of a lifetime to work with innovators around the world and unlock equitable financial access for all.
Marqeta’s Values
– Solve for the Customer: With a deep understanding of our customers' business and empathy for their needs, we deliver products and services that drive their success. Earning and keeping their trust guides everything we do.
– Do What's Right: Knowing businesses and livelihoods depend on us, we pursue solutions that disrupt responsibly and deliver high-quality results that our customers count on. We own our work from start to finish.
– Simplify and Innovate: We approach challenges with curiosity and take smart risks. Innovation comes from finding better, simpler ways to achieve extraordinary outcomes.
– Win as a Team: We succeed together by embracing diverse perspectives and pushing each other to raise the bar. We lead with humility and set aside hierarchy to work as a team.
– Make it Count: We drive forward with focus and agility. With a sense of urgency and purpose, we get the job done, and done right.
Equal Employment Opportunity, Accommodations and Privacy
Marqeta is an equal opportunity employer committed to an inclusive workplace that fosters belonging. We do not discriminate based on race, color, religion, sex (including pregnancy, lactation, childbirth, or related medical conditions), veteran status or uniformed service member status, age, national origin or ancestry, citizenship or immigration status, physical or mental disability, gender identity, gender expression, sexual orientation, genetic information (including testing or characteristics) or any other characteristic protected by applicable law. We also consider qualified applicants with criminal histories, consistent with legal requirements.
Marqeta endeavors to make reasonable accommodations for applicants with disabilities. If you are an individual with a disability and require a reasonable accommodation to submit this application, complete any pre-employment testing, or otherwise participate in the employee selection process, please submit this form with your specific accommodation request.
Personal data that is provided as part of the application and recruitment process is processed in accordance with the Applicant Privacy Notice. Additional information for California residents can be found here.
Ready to apply?
Apply to Marqeta
Senior Security Engineer - Detection & Response - EU/UK
Share this job
We are seeking a UK-based Senior Security Engineer to join our Security Operations and Response Team as a senior individual contributor.
In this role, you will investigate and respond to security incidents across Marqeta’s environment, proactively monitor for cyber threats, and serve as incident commander during security events of varying severity. You will contribute to the development and improvement of response methodologies aligned with the NIST Incident Response Lifecycle and help maintain cybersecurity incident response documentation. This position requires strong expertise in incident response, digital forensics, threat hunting, and security monitoring technologies. You will collaborate across teams, contribute to detection engineering efforts, and participate in 24x7 on-call rotations. The role reports to the Manager of Security Operations and Response.
This role can be performed remotely anywhere in the UK, or from our London, UK office. We'd love for you to join us!
The Impact You’ll Have
- Proactively monitor Marqeta’s environment for cyber threat activity and manage day-to-day security alerts through timely analysis, triage, and appropriate response actions
- Serve as incident commander during security events, directing investigation strategies and coordinating cross-functional response efforts
- Execute incident response activities aligned with the NIST Incident Response Lifecycle to detect, contain, eradicate, recover, and learn from cybersecurity incidents
- Contribute to the maintenance and improvement of the Cybersecurity Incident Response Plan (CIRP), playbooks, runbooks, and standard operating procedures to ensure consistent and effective response operations
- Participate in 24x7x365 on-call rotations, providing skilled guidance during security incidents and contributing to thorough post-incident reviews
- Research threat intelligence sources and contribute to hypothesis-driven threat hunting initiatives to uncover threats in corporate and production environments
- Work closely with Security Engineering to tune security solutions, enhance detection capabilities, and leverage business knowledge to improve security monitoring
- Design, develop, and maintain detection logic using a detections-as-code approach, collaborating with Security Solution Engineering to deploy detections through CI/CD pipelines into our SIEM and EDR platforms
- Contribute to detection coverage mapped to MITRE ATT&CK framework, identifying gaps in visibility and supporting detection development prioritization based on threat intelligence and business risk
- Coordinate with HR, law enforcement, response retainers, and cyber insurers as required, including support on cyber-crime financial fraud use cases
- Support the development of less-experienced security team members through knowledge sharing, pair investigations, and leading by example
- Partner with Fraud, Compliance, and Risk teams on security events involving payment systems, cardholder data, or regulatory reporting obligations under PCI DSS and related frameworks
Who You Are
- 5+ years of hands-on experience in security operations with strong expertise in incident response, digital forensics, and threat hunting
- Experience serving as an incident commander or leading incident response workstreams, with the ability to make sound decisions under pressure
- Strong knowledge of the NIST Incident Response Lifecycle and experience contributing to incident response documentation and procedures
- Proficiency with security monitoring and forensic tools including EDR, SIEM, and SOAR systems
- Experience developing detections-as-code, including familiarity with version control, CI/CD pipelines, and detection testing frameworks
- Working knowledge of MITRE ATT&CK and experience using it to assess detection coverage and map threat actor TTPs
- Experience contributing to post-incident reviews and implementing security improvements based on lessons learned
- Solid understanding of threat actor TTPs and ability to apply threat intelligence to enhance detection and response capabilities
- Experience tuning security solutions and developing automation workflows to improve monitoring effectiveness and response efficiency
- Working knowledge of AWS cloud services and securing cloud environments
- Ability to effectively communicate with technical and non-technical stakeholders during security incidents and investigations
- Experience in payment processing, fintech, or other highly regulated environments; familiarity with PCI DSS incident handling requirements a plus
- Proven ability to work independently while demonstrating sound judgment about when to engage team members or escalate issues
- Willingness to mentor and support the growth of junior security professionals in incident response techniques
Recruiter:
- Louise Devlin
Typical Process
- Application submission
- Recruiter phone or video call
- Hiring manager video call
- Virtual "Onsite" consisting of 4-5, 45 min interviews
- Offer!
Compensation & Benefits
- Premium Private Medical and Dental coverage
- Generous time off program with additional “Floating Holiday days”
- Retirement savings program with company contribution
- Equity in a publicly-traded company and an Employee Stock Purchase Program
- Monthly stipend to support our remote work model
- Annual development stipend to support our people's growth and development
- Family-forming benefits and up to 20 weeks of Parental Leave
- Wellbeing programs i.e. Modern Health, HealthKick and much more…
About Marqeta
Marqeta is on a mission to change the way money moves. We’re one of the earliest enablers of embedded finance, a market opportunity sized up in the trillions. Our card issuing platform provides unprecedented flexibility and control for companies to issue cards, authorize transactions, and manage payment operations in real time. Marqeta is powering the most well known brands in the new economy (Block, Cash App, Affirm, Instacart, Doordash, Uber, Walmart, etc). You don’t need to be a Payments expert to join the Marqeta Team, let us help you with that. This is the opportunity of a lifetime to work with innovators around the world and unlock equitable financial access for all.
Marqeta’s Values
– Solve for the Customer: With a deep understanding of our customers' business and empathy for their needs, we deliver products and services that drive their success. Earning and keeping their trust guides everything we do.
– Do What's Right: Knowing businesses and livelihoods depend on us, we pursue solutions that disrupt responsibly and deliver high-quality results that our customers count on. We own our work from start to finish.
– Simplify and Innovate: We approach challenges with curiosity and take smart risks. Innovation comes from finding better, simpler ways to achieve extraordinary outcomes.
– Win as a Team: We succeed together by embracing diverse perspectives and pushing each other to raise the bar. We lead with humility and set aside hierarchy to work as a team.
– Make it Count: We drive forward with focus and agility. With a sense of urgency and purpose, we get the job done, and done right.
Equal Employment Opportunity, Accommodations and Privacy
Marqeta is an equal opportunity employer committed to an inclusive workplace that fosters belonging. We do not discriminate based on race, color, religion, sex (including pregnancy, lactation, childbirth, or related medical conditions), veteran status or uniformed service member status, age, national origin or ancestry, citizenship or immigration status, physical or mental disability, gender identity, gender expression, sexual orientation, genetic information (including testing or characteristics) or any other characteristic protected by applicable law. We also consider qualified applicants with criminal histories, consistent with legal requirements.
Marqeta endeavors to make reasonable accommodations for applicants with disabilities. If you are an individual with a disability and require a reasonable accommodation to submit this application, complete any pre-employment testing, or otherwise participate in the employee selection process, please submit this form with your specific accommodation request.
Personal data that is provided as part of the application and recruitment process is processed in accordance with the Applicant Privacy Notice. Additional information for California residents can be found here.
Ready to apply?
Apply to Marqeta
As Marqeta’s Information Security Manager you will lead Vulnerability Management and establish a Data Security program. You’ll drive risk reduction across cloud, endpoints, and applications, while building controls and monitoring to safeguard critical data end-to-end across all of Marqeta’s systems and services—100% cloud-based, with no data center footprint.
We work Flexible First. This role can be performed remotely anywhere within the United States. We’d love for you to join us!
The Impact You'll Have:
Vulnerability Management
- Lead program strategy and operations: asset coverage, scanning cadence, prioritization, and measurable risk reduction using Tenable (Nessus/SC/IO) and Snyk.
- Integrate Tenable and Snyk findings into engineering backlogs with clear SLAs; partner with SRE, platform, and application teams to drive remediation.
- Establish risk-based prioritization (CVSS, KEV, EPSS, exploitability, business criticality) and publish dashboards for transparency to leadership.
- Mature patching and configuration baselines; build preventative controls and secure-by-default guardrails.
- Coordinate vulnerability disclosure, pen test intake, and threat-driven campaigns for actively exploited CVEs.
- Report program health, trends, and exceptions to security leadership and auditors.
Data Security (Program Build & Ownership)
- Establish clear data ownership and stewardship across critical datasets; define roles, responsibilities, and decision rights.
- Define and enforce data classification, access, and usage policies; drive best practices and guard rails for least privilege and segregation of duties.
- Operationalize Sentra (DSPM) and Google DLP to monitor data exposure and access risks; drive timely remediation with accountable teams.
- Build data lifecycle controls (creation, storage, use, sharing, archival, destruction) and technical guardrails embedded in platforms and workflows.
- Ensure compliance with data protection regulations (e.g., PCI, SOX); partner on control design, testing, and evidence collection.
- Collaborate with Security, Legal, Privacy, and Data teams to protect data across its lifecycle and enable safe analytics/product use cases.
- Develop metrics (DLP incidents, misconfigurations, toxic combinations, stale sensitive datasets, policy violations) and report to leadership.
Who You Are:
- 7–10+ years in information security with 3+ years leading programs or teams; regulated/fintech experience preferred.
- Hands-on depth managing vulnerabilities at scale with Tenable and Snyk across cloud-native, containers, endpoints, and CI/CD.
- Practical experience building/maturing data security programs with Sentra (DSPM) and Google DLP; strong policy design and enforcement.
- Partner management across engineering, data, and compliance; able to translate risk into actionable plans and measurable outcomes.
- Familiarity with PCI and SOX; knowledge of SDLC, DevSecOps, and cloud security architectures (AWS/GCP/Azure).
- Comfort with IAM/IGA, SIEM, CNAPP, and ticketing/workflow integrations; solid grasp of data governance concepts (stewardship, lineage).
- Excellent communication and reporting—clear narratives, crisp metrics, executive-ready updates.
- Certifications such as CISSP or CISM are a plus.
How you’ll measure success
- Reduction in high-risk vulnerabilities and time-to-remediation across prioritized asset classes.
- Complete inventory coverage and adherence to patch/configuration SLAs via Tenable/Snyk dashboards.
- Implemented and adopted data classification and access policies with defined ownership.
- Sentra and Google DLP coverage with declining exposure trends and timely remediation.
- Successful PCI/SOX audits for relevant controls; fewer exceptions and faster closure.
- Clear metrics and dashboards used by leadership for decision-making.
Nice to Have's:
- Experience automating Tenable/Snyk workflows into CI/CD and GRC/Risk registers.
- Background in data governance (stewardship councils, RACI) and analytics platform security (e.g., Snowflake, Databricks, BigQuery).
- Exposure to SaaS Security Posture Management and third-party data controls at scale.
Manager:
- Chetan Jha
Recruiter For This Role:
- Kayla Osuna
Compensation and Benefits:
Marqeta is a Flex First company which allows you to choose your best working environment, whether that be from home or at a company office. To support Flex First, we calibrate pay to a competitive value according to working location. Compensation is aligned according to three tiers within the United States:
- National: A baseline tier that applies to most of the geographic territory of the United States.
- Premium: Slightly elevated from the National tier, and oriented toward a narrower set of higher cost-of-living areas, such as Los Angeles CA and Seattle WA
- Premium Plus: A tier for the most expensive working areas, like the San Francisco Bay area and New York City.
Visit this page or consult with a Recruiter to determine which tier would be applicable to you.
When determining salaries, we consider several factors including, but not limited to, skills, prior experience, and work location. The new-hire base salary range for this position is:
- National: $167,100 - $208,900
- Premium: $179,800 - $224,700
- Premium Plus: $$195,400 - $244,400
We also believe in recognizing the contributions of our people. That's why we award annual bonuses to eligible employees, rewarding both individual performance and the success of the entire company.
Along with monetary compensation, Marqeta offers
- Multiple health insurance options
- Flexible time off – take what you need
- Retirement savings program with company contribution and after tax contributions
- Equity in a publicly-traded company and an Employee Stock Purchase Program
- Family-forming benefits, fertility support, and up to 20 weeks of Parental Leave
- Free therapy sessions, financial and professional coaching, and legal advice
- Monthly stipend to support our remote work model
- Annual “development dollars” to support our people growth and development
- Through Flex First, the freedom to live and work wherever you and your family thrive
About Marqeta
Marqeta is on a mission to change the way money moves. We’re one of the earliest enablers of embedded finance, a market opportunity sized up in the trillions. Our card issuing platform provides unprecedented flexibility and control for companies to issue cards, authorize transactions, and manage payment operations in real time. Marqeta is powering the most well known brands in the new economy (Block, Cash App, Affirm, Instacart, Doordash, Uber, Walmart, etc). You don’t need to be a Payments expert to join the Marqeta Team, let us help you with that. This is the opportunity of a lifetime to work with innovators around the world and unlock equitable financial access for all.
Marqeta’s Values
– Solve for the Customer: With a deep understanding of our customers' business and empathy for their needs, we deliver products and services that drive their success. Earning and keeping their trust guides everything we do.
– Do What's Right: Knowing businesses and livelihoods depend on us, we pursue solutions that disrupt responsibly and deliver high-quality results that our customers count on. We own our work from start to finish.
– Simplify and Innovate: We approach challenges with curiosity and take smart risks. Innovation comes from finding better, simpler ways to achieve extraordinary outcomes.
– Win as a Team: We succeed together by embracing diverse perspectives and pushing each other to raise the bar. We lead with humility and set aside hierarchy to work as a team.
– Make it Count: We drive forward with focus and agility. With a sense of urgency and purpose, we get the job done, and done right.
Equal Employment Opportunity, Accommodations and Privacy
Marqeta is an equal opportunity employer committed to an inclusive workplace that fosters belonging. We do not discriminate based on race, color, religion, sex (including pregnancy, lactation, childbirth, or related medical conditions), veteran status or uniformed service member status, age, national origin or ancestry, citizenship or immigration status, physical or mental disability, gender identity, gender expression, sexual orientation, genetic information (including testing or characteristics) or any other characteristic protected by applicable law. We also consider qualified applicants with criminal histories, consistent with legal requirements.
Marqeta endeavors to make reasonable accommodations for applicants with disabilities. If you are an individual with a disability and require a reasonable accommodation to submit this application, complete any pre-employment testing, or otherwise participate in the employee selection process, please submit this form with your specific accommodation request.
Personal data that is provided as part of the application and recruitment process is processed in accordance with the Applicant Privacy Notice. Additional information for California residents can be found here.
Ready to apply?
Apply to Marqeta