Role Description We're looking for a Back-End Engineer to help build the next generation of Congrify & IXOPAY's AI Payments Intelligence platform. In this role, you'll design and develop the backend services and data infrastructure that power AI-driven insights, analytics, and payment optimization. Working closely with Product, Data Science, and Engineering teams, you'll build scalable systems that help enterprise merchants improve payment performance, reduce costs, and make smarter decisions using their payment data. This is a hands-on engineering role with significant ownership and the opportunity to influence both technical architecture and product direction. - Design, build, and maintain scalable backend services for our AI Payments Intelligence platform. - Develop data pipelines, ETL processes, and cloud-native infrastructure that process large volumes of payment transaction data. - Build the backend services that power analytics, dashboards, AI-driven insights, and customer-facing reporting. - Collaborate with enterprise customers to integrate payment data from PSPs, acquirers, and other external systems. - Develop secure, reliable APIs and integration services for payment gateways, reporting APIs, webhooks, and other data sources. - Optimize backend systems for performance, scalability, security, and high availability. - Partner with Product, Data Science, and Engineering teams to design new platform capabilities and contribute to architectural decisions. - Stay current with emerging technologies and contribute to engineering best practices across the platform. Qualifications - 3+ years of experience in backend software engineering, data engineering, or database development. - Strong Python development experience building scalable backend applications and data processing systems. - Hands-on experience with AWS services, including S3, Lambda, DynamoDB, Cognito, SQS, and related cloud technologies. - Experience designing and maintaining data pipelines and cloud-native architectures. - Strong problem-solving skills and the ability to work independently in a collaborative, agile environment. - Excellent communication skills and attention to detail. Benefits - Experience with payment data analytics, payment gateways, PSP integrations, or FinTech platforms. - Experience with analytical databases such as ClickHouse or Snowflake. - Experience building AI or machine learning infrastructure and supporting analytics platforms. - Previous experience working in a startup or high-growth technology company. - This is a remote-friendly position. We welcome applications from candidates based in Germany or Italy. You'll have the flexibility to work remotely and visit our Munich office a few times during the year. Company Description Congrify Payments intelligence (an Ixopay Company) focuses on payments observability and intelligence as part of Ixopay, a payments orchestration, tokenization and intelligence provider. Our no-code platform consolidates data from various payment sources, providing businesses with the tools to effectively reconcile, monitor, and analyze their payment data.

Role Description As a Senior Penetration Tester on the Dragos Professional Services team, you will lead advanced vulnerability assessments, penetration testing, and adversary emulation activities within industrial technology environments. The focus is on identifying real‑world attack paths across ICS/OT networks through hands‑on exploitation, deep technical analysis, and close collaboration with customers across critical infrastructure sectors such as oil and gas, electric, water treatment, and manufacturing. This position translates complex technical findings into clear, actionable remediation guidance, contributes insights that inform detection and platform development, mentors team members, and represents Dragos through customer engagement and participation in the broader OT security community. Responsibilities - Lead and execute advanced vulnerability assessments, penetration tests, and purple team operations within industrial (ICS/OT) environments, including hands‑on exploitation of customer networks, systems, and applications. - Perform deep technical analysis of network and host data—such as packet captures, firewall rules, system configurations, and directory services—to identify attack paths, misconfigurations, anomalous activity, and vulnerabilities. - Conduct ongoing research into threat actor TTPs, tools, and vulnerabilities, applying findings to active engagements and contributing insights that support detection development and Dragos technology advancement. - Deliver clear, technically accurate reports and client briefings that outline findings, security impacts, and prioritized remediation recommendations, while supporting customer readiness through exercises and workshops as needed. - Strengthen team effectiveness by mentoring peers, improving workflows and runbooks, and contributing to the broader OT security community through collaboration, content creation, and knowledge sharing. Qualifications - 4+ years of hands‑on cybersecurity experience in ICS/OT environments, including vulnerability assessment, penetration testing, or red team activities. - Strong understanding of penetration testing methodologies (white, gray, and black box) and hands‑on experience with common offensive security tools such as Kali Linux, Metasploit, Cobalt Strike, Burp Suite Pro, and LOTL techniques. - Solid experience in cyber threats, attack vectors, exploits, and adversary tactics, techniques, and procedures (TTPs), with the ability to analyze network traffic and host‑based data effectively. - Excellent written and verbal communication skills, with proven ability to produce high‑quality reports and clearly present technical findings to both technical and non‑technical audiences. - Self‑motivated and collaborative with the ability to work independently in a remote/distributed environment. - Willingness to travel up to 30% to support customer engagements. Requirements - Salary: $140,000 - Competitive Equity Package - Comprehensive Benefits Plan Company Description Dragos is on a relentless mission to defend industrial organizations that provide us with the necessities of modern civilization; running water, functioning electricity, and safe industrial working environments. As the market leader in ICS/OT Cybersecurity, we are dedicated to arming our customers with best-in-class technology, threat intelligence, and services to protect their systems as effectively and efficiently as possible. We’re a remote-first culture with operations in North America, Europe, the Middle East, and APAC. We’re looking for mission-oriented teammates who embody our core values of authenticity, transparency, and trust. Are you ready to make a difference? Come join a mission that can save the world!

• Validate end-to-end workflows across system components and services. • Perform API testing using tools like Postman or similar REST clients. • Verify request/response structures, data integrity, and service behavior. • Test different functional scenarios across APIs, including positive and negative cases. • Execute detailed functional, regression, and exploratory testing. • Identify edge cases, failure scenarios, and unexpected system behaviors. • Validate error handling, fallback mechanisms, and system resilience. • Ensure consistency across different environments and configurations. • Validate data consistency across APIs and databases. • Perform backend validation using SQL queries. • Verify logs, records, and system outputs for correctness. • Test system behavior under different conditions (e.g., retries, timeouts, partial failures). • Validate data flow across multiple services and components. • Ensure system stability during complex workflows. • Support pre-release validation and smoke testing. • Participate in production verification and post-release checks. • Collaborate with teams for defect triaging and resolution.

• Assist users, business customers, and internal stakeholders with questions and issues related to our web and mobile applications. • Test new features and bug fixes; support error identification and continuous improvement of the applications. • Log requests and error reports in our ticketing system. • Independently handle known or simpler cases. • Document defects and steps to reproduce them. • Prepare incoming cases for further handling by the development or analysis teams. • Manually test new features and bug fixes and perform re-tests to support test documentation. • Document known issues and resolutions to support our knowledge base. • Work closely with development, QA, business analysis, and specialist teams.