Information Security Engineer II

Be an Early ApplicantFull Timemid

SQ - Belgrade - OfficePosted Today

Role Overview

Candescent is hiring a mid-level Information Security Engineer II. This is a full-time role in SQ - Belgrade - Office. Part of Candescent's Security hiring, posted today. applications are still in the early window, before most candidates have applied. Full responsibilities, required qualifications, and the apply link are listed in the description below.

Salary Context

Salary is not disclosed in this posting. Market median for Mid-level Security roles is $120k-$163k (based on 422 comparable listings). Many employers share specifics during the interview process or after an initial screen.

Resume Keywords to Include

Make sure these keywords appear in your resume to improve ATS scoring

AWSGCPAzureCI/CDAPISaaSTelemetryOR

Job description

Candescent is a forward-thinking technology company transforming how financial institutions deliver Intelligent Banking experiences. We unite digital banking, account opening, and branch solutions that power and connect digital banking, account opening, and branch solutions—creating seamless engagement across digital, remote, and in-person channels.

Our Experience-Led, Intelligence-Driven approach combines human-centered design with data, automation, and cloud-based innovation. Built on an API-first architecture, our extensible ecosystem enables institutions to adapt quickly, integrate easily, and unlock new opportunities for growth—turning every customer interaction into a moment of clarity, confidence, and connection.

Candescent is seeking a motivated and technically skilled Information Security Engineer II to help strengthen and scale our application and edge security capabilities, with a focus on Cloudflare-based controls.

This role is responsible for designing, implementing, and maintaining security solutions that protect customer-facing applications and distributed systems. The ideal candidate will bring hands-on experience in web application security, DNS security, and firewall protection, along with a strong understanding of modern threat vectors including credential stuffing and distributed attacks.

You will partner closely with engineering, infrastructure, and incident response teams to proactively identify vulnerabilities, respond to threats, and enhance the organization’s overall security posture in a cloud-first, FinTech environment.

Key Responsibilities and Deliverables:

Design, implement, and manage Cloudflare security controls, including WAF, bot mitigation, rate limiting, and DNS protection
Strengthen web application security by identifying and mitigating common threats (e.g., OWASP Top 10 vulnerabilities)
Configure and maintain firewalls and network protection mechanisms to safeguard external and internal systems
Lead and support vulnerability remediation efforts, working cross-functionally to prioritize and resolve identified risks
Protect distributed, cloud-based platforms through strong distributed systems security practices
Develop detection and mitigation strategies for credential stuffing prevention and bot-based attacks
Support incident response activities, including triage, investigation, containment, and post-incident reviews
Monitor and analyze security events using Cloudflare and other telemetry sources to identify threats and anomalies
Maintain and optimize DNS (Domain Name System) security configurations, including traffic routing and protection against DNS-based attacks
Collaborate with engineering teams to embed secure design principles into application development and deployment lifecycles

Qualifications and Experience:

Bachelor’s degree in Computer Science, Cybersecurity, or a related field (or equivalent experience)
3–5 years of experience in information security engineering or application security roles
Hands-on experience with Cloudflare (WAF, Bot Management, DNS, CDN security) or similar edge security platforms
Strong knowledge of:
- Web application security
- Firewalls and network protection
- Vulnerability management and remediation
- Distributed systems and cloud security architectures
Experience managing or responding to incident response scenarios
Familiarity with credential stuffing detection/prevention techniques and bot management tools
Working knowledge of DNS protocols and security considerations
Experience in cloud environments (AWS, Azure, or GCP preferred)
Strong analytical, problem-solving, and communication skills

Preferred Distinctions:

Experience in FinTech, SaaS, or regulated financial environments
Relevant certifications (e.g., CISSP, CEH, Security+, GIAC, Cloudflare certifications)
Experience implementing zero trust architectures
Familiarity with DevSecOps practices and CI/CD security integrations
Exposure to fraud prevention or digital banking security use cases

Statement to Third Party Agencies
To ALL recruitment agencies: Candescent only accepts resumes from agencies on the preferred supplier list. Please do not forward resumes to our applicant tracking system, Candescent employees, or any Candescent facility. Candescent is not responsible for any fees or charges associated with unsolicited resumes.

About Candescent

Candescent

candescent.com

SecurityOn-site

7 other open roles at Candescent on TryApplyNow.

View all 8 roles at Candescent Visit website

Frequently Asked Questions

How do I apply for the Information Security Engineer II position at Candescent?

Use the Apply button above to submit your application directly to Candescent. Most applications take less than 5 minutes if your resume and contact details are ready, and you'll be routed to the employer's official application system to finish.

Where is the Information Security Engineer II position at Candescent located?

This position is based in SQ - Belgrade - Office. Candescent has not indicated remote or hybrid options for this role, so candidates should plan for on-site work.

What does a Information Security Engineer II at Candescent earn?

Candescent has not disclosed a salary range in this posting. Many employers share specifics later in the interview process; you can also ask during a recruiter screen if compensation transparency is important to you.

When was the Information Security Engineer II role at Candescent posted?

This role was posted on July 21, 2026 (today). It's still listed as actively hiring; we re-confirm openings against the source system multiple times per day and remove closed roles.

Browse Cyber Security Jobs →