Senior Engineering Manager, Security

Imprint • San Francisco, CA

1d • $220,000 - $235,000

About The Position

As Imprint's Senior Engineering Manager for Security, you will report to the Director of Engineering for Trust & Security. You will own the entire security engineering foundation. This includes AI security governance, application security, cloud infrastructure, detection and response, and identity management. You'll build this with AI leverage from day one, scaling a small team's impact with modern tooling. Imprint is deliberately small and talent-dense. We use AI and tooling to give every person outsized leverage. This is a role where you can stay hands-on for as long as it makes sense. You set the strategic direction and do the work. Whether that balance shifts over time depends on what the business needs and what you want to build. We power co-branded credit card programs for 10+ enterprise partners, with AI embedded across the business: underwriting, servicing, and how we build software. That AI leverage is core to how Imprint operates, and it creates a security challenge worth solving: how do you build an AI-forward security posture for an organization that moves this fast?

Requirements

• 8+ years in security engineering, with experience building a security function from early stages
• Someone who builds and ships controls, not just identifies problems for others to fix
• Reads and reviews code in production languages (Go, TypeScript, Python, or similar)
• Detection engineering experience: has built a SIEM or SOAR pipeline from log sources through triage at least once
• Deep AWS security knowledge: IAM policy design, multi-account strategies, and how cloud privilege escalation works
• Has operated inside PCI DSS scope and shipped controls that survived a real audit
• Good judgment on scope: knows when to fix something directly versus set an SLA and hand it to the responsible team
• Comfortable using AI tools to scale a small security team while working within existing architecture and review processes

Nice To Haves

• Experience as the first or early security hire at a high-growth fintech or marketplace
• Background at companies like Ramp, Mercury, Stripe, Whatnot, or similar fast-scaling environments
• Experience securing AI and ML systems, model pipelines, or AI-assisted development workflows
• Familiarity with card issuing, payment processing, or financial services infrastructure
• Terraform and Helm fluency with hands-on CI/CD security integration experience
• Open source contributions, security research, or conference speaking

Responsibilities

• AI security: threat-model Imprint's agent surfaces for prompt injection, tool misuse, and authorization boundaries.
• AI for security: build AI-native capabilities that scale a small team's impact: AI-powered detection triage, automated compliance evidence collection, and threat-modeling assistance.
• Application security: threat modeling for new features, secure code review, SAST/SCA/DAST in CI, SDL design, dependency management, and secrets management. You read Go and TypeScript well enough to review PRs and catch the bugs that external audits should not have to find.
• Cloud and infrastructure security: IAM partitioning across multiple AWS accounts, least-privilege access, JIT elevation, cross-account trust hardening, KMS boundaries, SCP design, Kubernetes pod security, egress filtering, and Terraform security review.
• Detection and response: build the SIEM/SOAR pipeline from log sources through triage, write correlation rules, enable AI-powered triage, stand up on-call rotation, and create incident response runbooks.
• Identity and access: drive SSO coverage, access reviews, and JIT elevation in partnership with IT.
• Compliance partnership: design and implement the controls that satisfy SOC 2, PCI, and ISO evidence requirements. GRC runs the audit cycle. You own the underlying controls and make sure they actually hold up, not just pass sampling.
• Partner and customer trust: lead technical responses to third-party questionnaires and partner security reviews alongside GRC.

Benefits

• Competitive compensation and equity packages
• Leading configured work computers of your choice
• Flexible paid time off
• Fully covered, high-quality healthcare, including fully covered dependent coverage
• Additional health coverage includes access to One Medical and the option to enroll in an FSA
• 20 weeks of paid parental leave for the primary caregiver and 8 weeks for all new parents
• Access to industry-leading technology across all of our business units, stemming from our philosophy that we should invest in resources for our team that foster innovation, optimization, and productivity

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed