Information Security Engineer

MX Technologies, Inc.•Lehi, UT

20h

About The Position

MX is a financial technology company that builds data infrastructure and intelligent solutions for banks, credit unions, and fintechs. The Security Engineering team designs and implements measures to protect MX's digital assets and infrastructure, partnering with development and operations teams to embed secure coding practices, identify vulnerabilities, and protect sensitive information. Its work spans application, infrastructure, and cloud security; threat modeling; incident response; compliance; and security automation. The Senior Security Engineer brings hands-on expertise to complex security problems, determining methods and procedures for new initiatives and resolving issues that require in-depth evaluation. The role may coordinate other engineers as a team lead and serves as a trusted security expert for peers and senior leaders. The position aims to accelerate vulnerability remediation, strengthen incident response, reduce application and infrastructure risk, and support compliance with standards such as SOC 2 and PCI and with contractual security requirements.

Requirements

Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent practical experience.
8+ years of related security engineering experience with a Bachelor's degree; 6+ years with a Master's degree; 3+ years with a PhD; or equivalent experience.
Demonstrated experience in application security and/or infrastructure security, including securing networks, servers, or cloud environments.
Demonstrated experience performing threat modeling and risk assessments and using the results to prioritize security work.
Experience supporting compliance with industry standards such as SOC 2 or PCI.

Nice To Haves

Master's degree or PhD in Computer Science, Information Security, or a related field.
Experience leading or coordinating security incident response from detection through recovery.
Experience integrating security tools and automation into development and operational workflows.
Experience designing or delivering secure code training or other security awareness programs.
Experience in a regulated, fintech, or SaaS environment, and a track record of mentoring engineers or acting as a team lead.

Responsibilities

Own and execute application security initiatives, identify vulnerabilities, and promote secure coding practices throughout the development lifecycle.
Design and implement security controls for networks, servers, and cloud environments.
Lead threat modeling and risk assessments, using findings to prioritize security investments.
Develop and execute incident response plans covering detection, containment, and recovery, and drive complex incidents through resolution.
Provide technical expertise on regulations, standards such as SOC 2 and PCI, and contractual requirements; partner with compliance and governance stakeholders on audit-ready controls.
Build and maintain security tooling and automation integrated into development and operational workflows.
Partner with development and operations teams and other contacts to deliver security solutions suited to their workflows.
Educate employees on security best practices and emerging threats, with a focus on secure code training.
Track and improve security outcomes, including vulnerability remediation time, incident response times, patch coverage, and security control effectiveness, and translate them into business impact.
Mentor security engineers and coordinate team activities on new assignments as a team lead.