Infrastructure Security Engineer, BANGLADESH

nsave, a London-based fintech company, is seeking an experienced Infrastructure Security Engineer to join their remote team in Bangladesh on an independent contractor basis. The company focuses on providing secure USD accounts, global payments, and investment services to individuals in distressed economies with unstable banking systems. With a strong compliance-by-design approach and proprietary technology, nsave aims to protect and grow the wealth of the financially excluded. This role offers the opportunity to lead security efforts end-to-end, from cloud infrastructure hardening to driving formal compliance certifications, playing a foundational part in building and operating a regulated fintech platform at scale.

Key Responsibilities
- Own and continuously improve nsave’s information security program across infrastructure, application, and operational layers.
- Lead the company through security compliance certifications such as PCI DSS, SOC 2, and ISO 27001, managing the entire process from gap analysis to audit and accreditation.
- Design and secure the AWS Organization and account structure, enforcing least-privilege access, securing cloud networks, and managing infrastructure as code using Terraform.
- Manage endpoint security across a remote workforce, including device management, endpoint detection and response (EDR), hardening standards, patching, and disk encryption.
- Collaborate with backend and platform engineers to embed security into the software development lifecycle through code reviews, threat modeling, secrets management, dependency scanning, and CI/CD pipeline security.
- Maintain the risk register, lead incident response efforts, and conduct post-mortems to ensure continuous improvement.
- Assess and manage the security posture of third-party vendors and partners to maintain supply chain security standards.
- Promote a security-first culture by running internal training sessions and championing secure-by-default practices across the team.

Required Qualifications
- Proven hands-on experience designing and building AWS Organizations from the ground up, including multi-account structures, Organizational Units, Service Control Policies, and least-privilege IAM policies.
- Deep expertise in cloud network security, including VPC design and segmentation, security groups, NACLs, private connectivity, and protections such as WAF and DDoS mitigation.
- Strong proficiency with infrastructure as code, particularly Terraform, to define infrastructure and security controls and integrate guardrails into CI/CD pipelines.
- Experience securing endpoints for remote teams, including EDR solutions, mobile device management (MDM), hardening baselines, patch management, and disk encryption.
- Background in fintech, banking, or payments within regulated environments, with a solid understanding of risk, data privacy, and compliance obligations.
- Ability to communicate complex technical risks clearly to non-technical stakeholders, leadership, and auditors.
- Proactive mindset with strong ownership, actively identifying and mitigating security risks.

Preferred Qualifications and Benefits
- Experience working in or setting up Security Operations Centers (SOC), including SIEM, log monitoring, alerting, threat detection, and incident response.
- Hands-on experience guiding organizations through compliance certifications such as PCI DSS, SOC 2, or ISO 27001, including control design, evidence gathering, and auditor collaboration.
- Opportunity to work in a fast-growing, mission-driven fintech company backed by leading investors such as Sequoia Capital and Y Combinator.
- Join a diverse and inclusive workplace that values service, urgency, ownership, and high standards.
- Flexible remote working arrangement based in Bangladesh.

This role is offered on a freelance/independent contractor basis. Contractors are responsible for their own taxes, insurance, and statutory obligations. nsave is an equal opportunity employer and encourages applications from all backgrounds without discrimination.

Candidates should be motivated by nsave’s mission, thrive in high-accountability environments, embrace urgency and ambiguity, and be eager to build security foundations from first principles in an early-stage, high-growth company.