Information Security Engineer III

When you think of InComm Payments, think of Innovative Payments Technology.

We were founded over 30 years ago and continue to be a pioneer in the payment (FinTech) industry.

Since our inception, we have grown to be a team of over 3,000 employees in 35 countries around the world.

We own over 400 global technical patents and a network that includes over 525,000 points of retail distribution that points to our industry expertise.

InComm Payments works with the most recognized and valued brands in the world, and we are partnered with most of the world’s leading merchants.

InComm Payments is highly focused on our people and their growth, and we work hard to make a career at InComm Payments meaningful and rewarding.

We value innovation, quality, passion, integrity, and responsibility in all that we do, and we are looking for great people to join our team as we move forward towards a very bright future.

You can learn more about InComm Payments by visiting our Website or connecting with us on LinkedIn , YouTube , Twitter , Facebook , or Instagram .

As an Information Security Engineer III, you will work on securing applications across InComm Payments by integrating security tools into CI/CD pipelines, conducting threat modeling, and supporting incident response.

Ideally, you will have 5+ years of application security experience, strong scripting and cloud security skills (Azure, AWS, OCI), and hands-on knowledge of SAST/DAST tools, WAFs, and penetration testing.

The role also involves collaborating with development teams, leading security initiatives, and ensuring compliance with industry standards.

• Integrate SAST tooling into CI/CD pipelines, ensuring compatibility and efficient scanning within development workflows.
• Provide tailored SAST integration support for development teams at varying maturity levels with diverse toolsets and security requirements.
• Analyze application logs for anomalous patterns, communicate findings to leadership, and persuade them to take appropriate action.
• Participate in on-call rotation in support of WAF incidents.
• Validate security vulnerabilities identified by automated tools and fine-tune configurations to minimize false positives and reduce noise.
• Develop threat models with development teams to help expose risks in their deliverables.