Senior Security Engineer (Remote – US)

Compensation: $170K–$300K base + equity
Type: Full-time
Location: Remote (US)

---

Overview

We’re partnering with a fast-growing, AI-driven fintech company transforming how a massive, legacy industry operates. Their platform is modernizing outdated systems and automating complex workflows that have historically been slow, manual, and expensive.

This is a high-impact opportunity to join a lean, product-focused team tackling real-world problems at scale, with billions in transaction volume already flowing through the platform.

---

The Role

They’re hiring a Senior Security Engineer to build and scale security as a product enabler—not a blocker.

This is a hands-on IC role with broad ownership across:

• Application security
• Cloud / infrastructure security
• Compliance (SOC 2)
• Security tooling & automation

You’ll be writing code, shipping tooling, and embedding security into the development lifecycle—making it easy for engineers to build securely by default.

---

What You’ll Do

• Lead security initiatives across application, infrastructure, and identity
• Conduct threat modeling, vulnerability assessments, and remediation
• Build and integrate security tooling (SAST, DAST, container scanning, secrets detection)
• Harden AWS environments (IAM, VPCs, logging, GuardDuty, KMS, etc.)
• Own and evolve SOC 2 Type II compliance
• Establish a secure SDLC with lightweight, scalable processes
• Partner closely with engineering to improve security without slowing delivery
• Lead or support incident response and postmortems
• Manage identity/access systems (SSO, MFA, SCIM, access reviews)
• Oversee vendor and third-party security risk

---

Tech Environment

• Cloud: AWS (IAM, VPC, GuardDuty, Security Hub, etc.)
• Infra: Terraform, Pulumi, Docker, ECS (EC2/Fargate)
• Backend: Node.js / TypeScript (monorepo)
• Frontend: React + GraphQL
• Data: PostgreSQL, Redis, Kafka, OpenSearch
• Observability: Datadog, CloudWatch, Sentry
• CI/CD: Buildkite

---

What They’re Looking For

• Strong application security background (OWASP, threat modeling, secure code review)
• Deep AWS security experience
• Experience with Terraform and/or Pulumi
• Hands-on SOC 2 experience (controls, audits, evidence)
• CI/CD security integration experience
• Background in fintech or regulated environments preferred
• Experience with identity systems (SSO, SAML, MFA, SCIM)
• Ability to build tooling/automation (Python, Bash, etc.)
• Strong communicator who can work closely with engineering teams

---

Why This Role

• Security is treated as a core product function, not compliance overhead
• High ownership and autonomy
• Real scale and real impact (handling sensitive financial data)
• Remote-first, strong engineering culture
• Opportunity to shape security from the ground up