Security Engineer

Thunes • Atlanta, GA

6d • Hybrid

About The Position

Thunes Financial Services is hiring a Security Engineer to be the architect of trust for our fintech platform. This hybrid specialist role bridges the gap between Infrastructure Security and Application Security, ensuring our systems are as resilient as they are compliant. This role will play a critical part in maintaining our regulatory compliance posture while building automated, scalable security guardrails. As a Security Engineer, you will be responsible for security across the full lifecycle of our fintech platform. This hybrid specialist role requires deep engagement with both infrastructure and application security, focusing heavily on automation and regulatory compliance within a high-stakes, regulated environment. Success in this role means ensuring systems are resilient and compliant, maintaining our regulatory compliance posture, building automated, scalable security guardrails, and having a direct impact on the security strategy.

Requirements

• A Bachelor's degree in Computer Science or a related field, but similar professional experience is equally valued.
• A proven track record of deep experience in both Infrastructure Security and Application Security is required.
• Hands-on experience building security guardrails within CI/CD tools (e.g., GitHub Actions, GitLab CI, or Jenkins).
• Deep experience in both Infrastructure Security (Cloud/K8s) and AppSec (OWASP Top 10, Secure SDLC).
• Proven proficiency with enterprise vulnerability management platforms and automated dependency scanning solutions.
• Ability to write code (Python, Go, or Bash) to handle bugs.
• Experience using AI-driven automation or agentic tools to streamline security workflows is required.
• Understanding of the high-stakes nature of working in a regulated environment and ability to translate compliance requirements into technical reality.
• Clear, effective communication of trade-offs to non-technical stakeholders.
• History of collaboration with engineers and others.

Nice To Haves

• Certifications such as CISSP
• Prior experience in startups, especially Fintech

Responsibilities

• Design, build, and maintain automation to integrate security testing (SAST/DAST/SCA) directly into our deployment pipelines.
• Ensure that security is a "paved road" for developers, not a bottleneck.
• Own security across the lifecycle—from securing our cloud infrastructure (AWS/GCP) to performing code reviews and architectural risk assessments.
• Manage our detection stack using modern vulnerability scanning and dependency management tools to identify, prioritize, and track risks across the environment.
• Build and maintain automated workflows for vulnerability reporting, triage, and remediation.
• Leverage AI-powered agentic coding tools or similar automation to eliminate manual toil and accelerate response times.
• Monitor our technical security controls to ensure that they are operating effectively throughout the year to meet the rigorous cybersecurity compliance requirements to support regulatory exams as well as SOC-2 and PCI audits.
• Serve as a key member of our security response team, helping to investigate and mitigate potential threats.
• Collaborate with Product, data engineering, front-end engineering, tech ops, compliance, and legal

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Number of Employees: 101-250 employees