About the job
About the Role
As a Cloud Security Engineer at LeanTech, you will play a pivotal role in fortifying our cloud security infrastructure. Your expertise will ensure the confidentiality, integrity, and availability of our cloud environments. This hands-on, technical position emphasizes cloud security deployment, monitoring, and automation. You will collaborate closely with DevOps, cloud engineering, and compliance teams to implement secure infrastructure aligned with industry best practices.
The Moment
LeanTech has experienced remarkable growth, tripling in size over the past year, and we anticipate doing so again next year. Originating as the region’s first Open Finance platform, we are evolving into a comprehensive multi-product infrastructure company that powers payments, data, and lending across the MENA region. Our expansion includes entering new markets, opening additional offices, acquiring businesses, and developing unprecedented capabilities.
To date, we have processed billions in transactions and earned the trust of over 300 clients, including Tabby, Tas’heel, and Hungerstation. Our journey is backed by major investors like General Catalyst, Sequoia, and Shorooq, with our recent $67.5M Series B funding marking just the beginning.
Your Responsibilities
- Cloud Security & Architecture
- Implement, configure, and maintain security controls in cloud environments (OCI, GCP).
- Deploy and optimize cloud security tools such as WAF, SIEM, and endpoint monitoring.
- Engage in secure architecture design, threat modeling, and cloud security posture management.
- Automation & Infrastructure as Code
- Utilize Terraform or other IaC tools for automating security deployments and configuration management.
- Guarantee consistency, compliance, and reproducibility of cloud security configurations.
- Compliance & Standards
- Ensure cloud security controls meet regulatory requirements (SAMA CSF, NCA ECC, PDPL) and adhere to global standards such as ISO 27001 and SOC 2.
- Assist in audit and regulatory assessments by providing technical evidence and security documentation.
- Monitoring & Incident Support
- Monitor security events, respond to incidents, and support incident investigations.

