SumUp is a fintech company that processes payments for over 4 million merchants across 37 markets. Founded in 2012 and now employing 3,000+ people from more than 90 nationalities, it builds the full stack: card readers, point-of-sale systems, business accounts, invoicing tools, and loyalty platforms. The attack surface is substantial - card-present and card-not-present transactions, device firmware, account takeover vectors, and cross-border regulatory compliance all live under one roof.
The security challenge here is fundamentally about protecting financial infrastructure at scale for small businesses that lack dedicated IT teams. That means securing payment terminals running in the wild, defending transaction pipelines that handle real money movement, hardening business account platforms against fraud and credential stuffing, and maintaining PCI DSS compliance across dozens of jurisdictions with varying regulatory frameworks. The threat model spans from physical device tampering to sophisticated financial fraud patterns.
Technical domains touch payment processing, embedded systems security, cloud infrastructure, identity and access management, and application security across web and mobile surfaces. The team operates across more than 20 offices globally, supporting a workforce that values radical candour and genuine collaboration. SumUp has been recognized as a Top Global Employer for LGBTQ+ community by the Stonewall Workplace Equality Index.
