Lead Security Engineer, US Mobile
Fraud
CA$150-220k
5G connectivity provider
Be an early applicant
5G connectivity provider
201-500 employees
Be an early applicant
CA$150-220k
201-500 employees
Company mission
To revolutionise wireless by building the next-generation connectivity platform.
Role
Who you are
- Bachelor’s degree in Computer Science, Software Engineering, or a related field
- 7+ years of experience in fraud, cybersecurity, application security, or security engineering — ideally in developer-heavy environments
- Strong software engineering background with hands-on experience in Java, Kotlin, or Go (comfortable reading and writing production code)
- Deep understanding of secure software development, API security, and microservices architectures
- Experience integrating security into CI/CD pipelines and cloud-native environments (AWS, GCP, or similar).Understanding of compliance frameworks such as PCI-DSS, SOC 2, or ISO 27001 is a strong plus
- Familiarity with observability and monitoring platforms such as Datadog, Cloudflare WAF, or similar tools for traffic analysis and anomaly detection
- Proficiency with security monitoring and automation tools (SIEM, EDR, IDS/IPS, etc.)
- Excellent communication skills and the ability to collaborate with both engineers and leadership
- Certifications like CISSP, OSWE, GCSA, or CISM are a plus but not required — demonstrable coding and analytical ability matter most
What the job involves
- As the Lead Security Engineer, you’ll be both a hands-on technical contributor and a security leader. You will write and review code, design secure systems, and work closely with backend and platform engineers to ensure that our infrastructure, applications, and services are resilient against evolving threats
- You’ll lead a small, high-impact team responsible for embedding security into the entire SDLC — from code review and threat modeling to runtime monitoring and incident response. Your mission: make security an integral part of our engineering DNA
- Extensive experience detecting and preventing online payment fraud, including fraudulent plan purchases, unauthorized payment method abuse, card-not-present fraud, and chargeback manipulation across high-volume digital transaction flows
- Hands-on expertise building fraud detection systems for e-commerce and subscription billing environments, including rule-based and ML-assisted models that flag suspicious payment behavior, account-funded fraud, and promo/credit abuse in real time
- Deep understanding of identity fraud vectors in digital-first environments, including synthetic identity creation, stolen credential abuse during onboarding, and fraudulent plan upgrades or device financing applications tied to payment exploitation
- Write and review production code in Java, Kotlin, and Go, ensuring security best practices are applied across APIs, backend services, and infrastructure automation — with particular attention to payment processing flows and data integrity
- Perform secure code reviews and guide developers on secure design patterns, embedding fraud-aware coding standards into engineering workflows from the ground up
- Monitor and analyze application and network traffic using tools like Datadog and Cloudflare WAF to identify anomalies, payment abuse patterns, account takeover attempts, and emerging threats across cloud and application environments
- Build and automate security tooling that integrates into CI/CD pipelines for vulnerability scanning, dependency management, and code integrity checks — including controls specific to payment and billing service deployments
- Collaborate with DevOps and backend engineers to design secure architectures, enforce least privilege, and adopt zero-trust principles across subscriber lifecycle flows including onboarding, SIM activation, number porting, and payment processing
- Lead threat modeling, risk assessments, and incident response for fraud and security events — maintaining playbooks, coordinating responses, and translating findings into actionable hardening improvements across Telecom-specific attack surfaces
- Stay current with evolving fraud techniques, exploits, and threat intelligence, proactively applying new research to harden payment systems, detection models, and security tooling against emerging attack vectors
Our take
4G networks transformed our internet experience with faster speeds and better connectivity, and 5G is now taking this further with even quicker speeds. Although 5G is becoming more common, it remains relatively new and not universally available. Networks offering 5G can be costly and might not always match the features of 4G networks.
US Mobile provides 5G mobile data connectivity in the US, claiming to reach speeds of up to 3GB p/s through eSIMs that can be activated remotely. The company offers a range of plans from cheap "talk and text" to unlimited data packages, the latter of which comes with a variety of perks such as free streaming service subscriptions and free international calls.
Whilst the company will face competition from the growing number of 5G network providers, US Mobile stands out by focusing on providing access to all, from unlimited family 3GB p/s packages to individual basic text and call SIMs. The company also guarantees full US coverage, in addition to providing various group pool packages for families and businesses - features which should see it remain a strong option in the market.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
20% employee growth in 12 months
Company
Funding (last 2 of 3 rounds)
May 2022
$31m
SERIES A
Jul 2021
$11.5m
SERIES A
Total funding: $46.5m
Company benefits
- Flexible working hours
Company HQ
Midtown East, New York, NY
Leadership
Ahmed Khattak
(Founder & CEO)Founder of GSM Nation LLC from 2010 to 2015.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 13 more jobs at US Mobile