Senior Security Engineer (US, Remote)
About The Position
We’re partnering with a fast-growing, AI-driven fintech company transforming how a massive, legacy industry operates. Their platform is modernizing outdated systems and automating complex workflows that have historically been slow, manual, and expensive. This is a high-impact opportunity to join a lean, product-focused team tackling real-world problems at scale, with billions in transaction volume already flowing through the platform. They’re hiring a Senior Security Engineer to build and scale security as a product enabler—not a blocker. This is a hands-on IC role with broad ownership across: Application security Cloud / infrastructure security Compliance (SOC 2) Security tooling & automation You’ll be writing code, shipping tooling, and embedding security into the development lifecycle—making it easy for engineers to build securely by default.
Requirements
- Strong application security background (OWASP, threat modeling, secure code review)
- Deep AWS security experience
- Experience with Terraform and/or Pulumi
- Hands-on SOC 2 experience (controls, audits, evidence)
- CI/CD security integration experience
- Experience with identity systems (SSO, SAML, MFA, SCIM)
- Ability to build tooling/automation (Python, Bash, etc.)
- Strong communicator who can work closely with engineering teams
Nice To Haves
- Background in fintech or regulated environments preferred
Responsibilities
- Lead security initiatives across application, infrastructure, and identity
- Conduct threat modeling, vulnerability assessments, and remediation
- Build and integrate security tooling (SAST, DAST, container scanning, secrets detection)
- Harden AWS environments (IAM, VPCs, logging, GuardDuty, KMS, etc.)
- Own and evolve SOC 2 Type II compliance
- Establish a secure SDLC with lightweight, scalable processes
- Partner closely with engineering to improve security without slowing delivery
- Lead or support incident response and postmortems
- Manage identity/access systems (SSO, MFA, SCIM, access reviews)
- Oversee vendor and third-party security risk
Benefits
- Security is treated as a core product function , not compliance overhead
- High ownership and autonomy
- Real scale and real impact (handling sensitive financial data)
- Remote-first, strong engineering culture
- Opportunity to shape security from the ground up
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
