We are seeking a Business Operations Manager to partner closely with the COO and executive leadership, driving strategic initiatives, cross-functional execution, and operational excellence across the organization.

This is a maternity leave replacement role, with the opportunity to continue in the position permanently for the right candidate.

Reporting directly to the COO, you will combine business operations leadership with Chief of Staff responsibilities. You will help turn company strategy into execution, lead high-impact cross-functional initiatives, improve how teams work together, and build scalable processes and systems that support rapid growth.

You will work closely with executive leadership, Product, R&D, Marketing, Studio, and Customer Experience to bridge gaps, remove friction, and turn complex, cross-functional challenges into clear plans and effective execution.



Key Responsibilities

Strategic Execution & Governance

Leadership Alignment: Partner with executive leadership to translate company strategy into actionable operational plans and department OKRs/KPIs.
Company Operating Rhythm: Support the company's operating rhythm, including leadership syncs, quarterly reviews, cross-functional standups, and strategic offsites.
Special Projects: Lead high-impact, cross-functional initiatives from inception through rollout.
Executive Advisory & Chief of Staff Support: Serve as a trusted partner to the COO and CEO, supporting executive priorities, helping drive cross-functional projects, and tracking progress on key strategic initiatives.
Process Design & Operational Excellence

Cross-Functional Workflow Optimization: Review existing handoffs between teams to identify bottlenecks, reduce cycle times, and improve operational efficiency.
Scale & Automation: Identify manual or inefficient processes across the business and implement automation, tooling, or standard operating procedures (SOPs) to improve how the organization operates at scale.
Cross-Departmental Synchronization

Parent Company Focal Point: Serve as the primary liaison and main point of contact for cross-functional communication and strategic coordination with our parent company in Italy.
Product & GTM Alignment: Connect Product/Engineering with Go-To-Market teams (Marketing, PMM, CX) to ensure smooth launches, clear messaging and enablement, and aligned feature rollouts.
Customer Journey Improvement: Work with CX to identify customer drop-off points and areas of friction, and help drive systemic improvements across the customer journey.
Metrics, Insights & Reporting

Performance Tracking: Maintain executive-level dashboards tracking core operational health metrics, cross-functional SLA adherence, and team efficiency.
Data-Driven Insights: Analyze operational performance data to identify risks, inefficiencies, and growth opportunities across the business, and turn those insights into actionable recommendations.

Mesh Payments is looking for a hands-on Security & IT leader to serve as the foundational pillar of our internal technology and security operations. In this unique role, you will be the sole owner of our IT infrastructure while playing a critical part in protecting a fast-growing, cloud-native fintech platform.
In this position, you will have the autonomy to choose the best tools for the job, manage our corporate environment from the ground up, and have a direct impact on protecting the financial data of global enterprises while ensuring our team has the best technical tools to succeed.
What youll do:
IT Operations & Employee Experience
Youll work closely with the CTO, engineering, and business teams, combining hands-on execution with real ownership and impact.
Manage corporate SaaS platforms, identity management (SSO), and Google Workspace.
Compliance & audits (SOC2, PCI)
Acting as the security point of contact for customers, auditors, and internal teams
Act as the primary technical point of contact for all employees, providing hands-on support and troubleshooting.
Deploy and operate endpoint security and management tools (EDR, MDM, DLP) across a distributed workforce.
Cloud & Infrastructure Security

Improve and maintain the security posture of our AWS/GCP-based cloud infrastructure.
Operate cloud security platforms, such as Upwind / Wiz / Oligo, or similar solutions to prioritize and remediate risks.
Design and enforce secure access controls and least-privilege IAM policies.
Investigate cloud security alerts and support incident response.
Application Security
Integrate security into the SDLC and CI/CD pipelines by automating SAST, SCA, and secret scanning.
Secure containerized workloads (Kubernetes / EKS) focusing on runtime protection and image hardening.
Provide guidelines and safeguards for AI-powered development processes and AI models within our SaaS platform.
Compliance & Security Culture
Support SOC2 and PCI DSS compliance initiatives and audit readiness.
Serve as the primary security focal point for external auditors.
Contribute to security awareness and best practices across the company, explaining the rationale behind security requirements.

we are looking for an experienced Incident Response Manager (IRM) to lead incident response services for clients across EMEA. This is a senior management role within Incident Response department and an integral part of the companys global IR service delivery organization.
The role combines technical leadership, crisis management, client engagement, and cross-functional project leadership. Following a substantial and successful tenure in the position, the IRM will have opportunities for continued professional growth and advancement across a variety of roles within .
Main Responsibilities:
Lead incident response and threat-hunting engagements involving large-scale and sophisticated cyberattacks, with the objective of containing, mitigating, and defeating real-world threats.
Lead dynamic, cross-functional teams of cybersecurity researchers, forensic experts, and other specialists assembled according to the specific needs of each engagement. Team members do not report directly to the IRM outside the scope of the project.
Maintain clear, concise, and timely internal communication, providing regular updates to technical, financial, legal, business, and executive stakeholders within .
Lead client-facing communication throughout investigations and work closely with clients IT, security, legal, and executive teams, as well as relevant external stakeholders.
Serve as a trusted advisor to clients during high-pressure and business-critical situations.
Collaborate with global teams to ensure consistent, high-quality incident response delivery across regions.
Strengthen client relationships, identify relevant business opportunities, and support the introduction of additional services.
Contribute to broader strategic objectives through professional publications, thought leadership, marketing initiatives, and business development activities.
Design, develop, and continuously improve internal incident response methodologies, processes, and capabilities.

We're looking for a Senior Security Lead to partner closely with our CISO in driving our security strategy and running the day-to-day of the security function. You'll own the execution of key initiatives, keep the security program on track, and work with senior stakeholders across the company to make security part of how we build and operate.

This role suits someone who combines strong technical depth with excellent communication skills and strong project management capabilities. You'll have broad scope, high visibility, and a direct impact on how security works in our company.

Key Responsibilities:

Partner with the CISO on our security strategy and roadmap, and own the execution of key initiatives

Help run the day-to-day of the security function: priorities, planning, tracking, metrics and follow-through

Translate business objectives into scalable security programs and controls

Act as a key stakeholder in security governance, risk management and decision-making

Work with senior leaders across Engineering, Infrastructure, Product, Legal, Compliance and Business teams to align on security priorities and drive cross-functional initiatives

Support regulatory, audit and customer security requirements, keeping security aligned with business goals and commitments

Drive the adoption of AI, automation and emerging technologies to improve security effectiveness and efficiency

Foster a culture of accountability, operational excellence and security ownership across the organization

We are seeking a Senior IT Administrator to be responsible for managing the companys local and global IT infrastructure, ensuring system reliability, enforcing security controls, and supporting business continuity across offices. This role will play a key part in scaling IT operations, improving service delivery, and aligning infrastructure with security and business objectives.

What You'll Do
Own the end-to-end IT lifecycle, including onboarding, offboarding, user provisioning, and access management.
Manage day-to-day IT support, troubleshoot technical issues, and ensure timely resolution through the ticketing system.
Administer Google Workspace, JumpCloud, CrowdStrike EDR, and other SaaS platforms.
Manage company endpoints, hardware inventory, procurement, software licenses, and vendor relationships.
Partner with the CISO to implement security initiatives, enforce IT policies, and support system integrations.
Ensure endpoint security, backups, business continuity, and compliance with SOC 2 and ISO 27001.
Create and maintain IT documentation, knowledge base articles, and operational procedures.
Leverage AI and automation to improve IT operations, reduce manual work, and increase team efficiency.

We are seeking a seasoned security leader to manage a high-caliber research team focused on the security of Identity, SaaS, and Cloud ecosystems. In this role, you will provide technical mentorship and strategic vision, guiding research into service risk profiling and adversarial TTPs analysis. You will be the bridge between cutting-edge research and product innovation, ensuring our findings translate into high-impact security outcomes to stay ahead of modern adversaries.
Key Responsibilities:
Define the research roadmap for Identity, SaaS, and Cloud risks, ensuring the team's outputs align with the evolving threat landscape and company goals.
Lead and grow a diverse team of security researchers, providing the technical guidance and career development necessary to maintain a world-class research organization.
Leverage your experience in a product-focused environment to ensure research outcomes directly influence service security strategies and customer-facing solutions.
Oversee the execution of high-fidelity attack simulations and TTP deconstruction, ensuring the 'how-to' of secure service usage is clearly defined and actionable.
Partner with Engineering, Product Management, and Threat Intel teams to transform raw research into robust mitigation strategies and resilient service blueprints.
Represent the team's research internally and externally, positioning the organization as a premier authority on Identity-centric and Cloud security.

We are seeking a seasoned security leader to manage a high-caliber research team focused on the security of Identity, SaaS, and Cloud ecosystems. In this role, you will provide technical mentorship and strategic vision, guiding research into service risk profiling and adversarial TTPs analysis. You will be the bridge between cutting-edge research and product innovation, ensuring our findings translate into high-impact security outcomes to stay ahead of modern adversaries.
Key Responsibilities
Define the research roadmap for Identity, SaaS, and Cloud risks, ensuring the team's outputs align with the evolving threat landscape and company goals.
Lead and grow a diverse team of security researchers, providing the technical guidance and career development necessary to maintain a world-class research organization.
Leverage your experience in a product-focused environment to ensure research outcomes directly influence service security strategies and customer-facing solutions.
Oversee the execution of high-fidelity attack simulations and TTP deconstruction, ensuring the 'how-to' of secure service usage is clearly defined and actionable.
Partner with Engineering, Product Management, and Threat Intel teams to transform raw research into robust mitigation strategies and resilient service blueprints.
Represent the team's research internally and externally, positioning the organization as a premier authority on Identity-centric and Cloud security.

Senior hands-on offensive security professional responsible for delivering complex, objective-driven Red Team and Adversary Simulation engagements for local and global clients. The role combines deep technical execution with the ability to independently take ownership of Red Team projects, including threat-informed adversary emulation, covert Red Team operations, Purple Team exercises, attack path analysis, and advanced penetration testing across enterprise, cloud, application, identity, and hybrid environments. The position requires strong offensive tradecraft, sound technical judgment, and the ability to manage assigned engagements from planning through delivery, while contributing to reusable tooling, knowledge sharing, technical quality, and client advisory. It requires the ability to translate realistic attack scenarios into clear insights that improve clients prevention, detection, response, and overall cyber resilience.
Job description
Take ownership of assigned Red Team, adversary emulation, Purple Team, and threat-led offensive security engagements, from planning and rules of engagement through execution, reporting, and client debrief.
Emulate realistic threat actors and execute multi-stage attack chains, including reconnaissance, initial access, persistence, privilege escalation, credential access, lateral movement, command and control, defense evasion, and achievement of agreed business objectives.
Design threat-informed scenarios and map adversary tactics, techniques, and procedures to MITRE ATT&CK and other relevant threat-led testing frameworks.
Assess enterprise environments across Active Directory, Microsoft Entra ID, endpoints, networks, applications, cloud platforms, identity systems, and hybrid infrastructure, chaining weaknesses into realistic attack paths and business impact.
Develop, customize, and maintain offensive tooling, scripts, payloads, command-and-control infrastructure, and operational tradecraft while applying appropriate safety and operational-security controls.
Work closely with SOC, detection engineering, incident response, and security architecture teams to validate detection and response capabilities and translate observed gaps into actionable improvements.
Communicate directly with clients, present technical and executive results, and provide risk-based recommendations aligned with the clients threat landscape and business priorities.
Contribute to technical quality reviews, knowledge sharing, research initiatives, reusable methodologies, and the continued development of the teams Red Team capabilities.

We are seeking a highly skilled and experienced Head of Application Security to join our dynamic team. This role is pivotal in driving the security of our software development lifecycle and ensuring the robustness of our applications against potential threats. The ideal candidate will have a strong background in secure software development practices, including SSDLC implementation, and a deep understanding of security risks & tools. This position reports directly to an R&D VP.
Key Responsibilities
Lead the application security team, providing strategic direction and mentorship.
Develop and implement a comprehensive Secure Software Development Lifecycle (SSDLC) framework.
Oversee the integration of security practices into all phases of the software development lifecycle, including CI/CD guardrails.
Conduct risk assessments and threat modeling to identify and mitigate potential security vulnerabilities.
Collaborate with development teams to ensure secure coding practices and adherence to security standards, while maintaining developer productivity.
Implement and manage security automation tools and processes to enhance the efficiency of security operations.
Stay up-to-date on the latest security trends, vulnerabilities, and technologies to continuously improve our security posture.
Provide expert guidance on security architecture and design for new and existing applications.
Lead incident response efforts related to application security breaches and vulnerabilities.
Foster a culture of security awareness and continuous improvement within the organization.

We are seeking a highly skilled and hands-on Application Security Lead to take ownership of our product and infrastructure security. Reporting directly to the CISO with a dotted line to the CTO, you will act as the critical bridge between our Security and Engineering teams, driving a robust "security-first" culture.



While this role encompasses both application and infrastructure security, our primary focus is on the Application Security domain. You will lead our transition towards a mature DevSecOps organization, ensuring that security is seamlessly embedded into every phase of our SDLC without compromising delivery speed.

Key Responsibilities

Application Security & Secure Engineering

Secure SDLC Integration: Embed security practices throughout the entire SDLC, from initial design and planning to deployment and maintenance.
Threat Modeling & Architecture: Lead threat modeling (e.g., STRIDE) and architectural reviews for high-risk features like authentication, PII, and payments.
AppSec Tooling & Automation: Integrate and manage automated security scanning (SAST, SCA, DAST) within CI/CD pipelines to ensure code integrity seamlessly.
Mobile & API Security: Enforce least-privilege models for API configurations. Lead security initiatives specifically tailored to mobile environments (iOS/Android), protecting core mobility platform.
Offensive Security & Pentesting: Orchestrate internal red teaming and external penetration tests for web and mobile applications. Manage Vulnerability Disclosure Programs (VDP) / Bug Bounties.
Developer Empowerment & DevEx: Collaborate with developers to provide automated tools, coding guidelines, and frictionless guardrails for secure-by-design development, ensuring security acts as an enabler, not a blocker.
Incident & Vulnerability Management: Act as the technical escalation point for application security incidents, leading detection and recovery efforts, while prioritizing vulnerabilities across the product suite for timely remediation.
Cloud & Infrastructure Security

Cloud & Network Posture: Manage cloud security posture (CSPM) across AWS/GCP and oversee broad network security measures, including WAF, Bot management, and environment segmentation.
Pipeline & Secrets Management: Secure the CI/CD infrastructure against tampering and enforce robust secret management and secure repository controls across the organization.
Resilience & Recovery: Manage disaster recovery (DR) and business continuity planning for production environments.
Governance, Culture & Compliance

DevSecOps Strategy: Lead the strategic evolution of DevOps into a mature DevSecOps model, aligning with industry frameworks like OWASP SAMM and NIST SSDF.
Metrics & Measurement: Define and track key security metrics (e.g., MTTR, vulnerability density) to measure and improve program effectiveness.
Security Champions: Build and mentor a Security Champions program within R&D to scale security knowledge and foster a grassroots culture.
Compliance & Privacy: Ensure continuous compliance with PCI-DSS, ISO27001, and GDPR, championing privacy-by-design principles across all user data and R&D operations.