Security Software Engineer

HIFI•New York, NY

4d•Onsite

About The Position

As a Security Engineer at HIFI, you will help own the day-to-day security of the company and the infrastructure behind its payments products. You will build HIFI’s security program from the ground up, including identity and access management, endpoint security, and cloud and network controls that protect systems and data. This hands-on role has significant ownership: you will set a risk-based security roadmap, establish capabilities such as monitoring, incident response, and secrets management, and write policies governing access and information handling. You will also help keep HIFI prepared for audits and partner security reviews as it expands into more regulated markets. HIFI’s engineering team builds the payments infrastructure used by fintechs and financial institutions to move money on stablecoin rails. It owns the APIs, ledger, and on-chain systems behind HIFI payments, and collaborates with product and compliance to ensure the infrastructure is reliable, secure, and suitable for regulated use. The Security Engineer will work across engineering, product, compliance, and leadership to help the company grow without compromising safety.

Requirements

6+ years of experience in security engineering.
Deep, hands-on AWS and network security experience, with infrastructure managed in Terraform.
Experience owning security controls in a regulated environment, such as payments or financial services.
Strong web application and API security skills, including modern authentication and authorization.
Experience writing audit-ready policies and procedures.
Experience building security practices from the ground up in a fast-paced startup.
Comfort writing and debugging backend code, ideally JavaScript or TypeScript.
Hands-on experience with SIEM, MDM, and database security, especially Postgres.
Must be within a commutable distance from the office and able to work in person most days of the week.

Nice To Haves

Interest in stablecoins and their potential to change how money moves around the world.
A builder’s mindset: shipping practical fixes quickly and knowing when a solution is safe enough.

Responsibilities

Design and implement HIFI’s security roadmap from first principles through production, prioritizing work by risk.
Lead threat modeling and hardening for money movement systems.
Build security capabilities for monitoring and detection, incident response, secrets management, API security, and CI/CD hardening.
Own cloud and network security architecture, including segmentation, encryption, and least-privilege access.
Own endpoint and identity security across company devices and SaaS tools.
Reinforce secure development and infrastructure practices across engineering.
Write and maintain information security policies and procedures.
Ensure HIFI meets information security compliance and audit expectations as it expands into more regulated markets.
Collaborate with engineering, product, compliance, and leadership to move quickly without compromising safety.