Senior Security Engineer

Finix•San Francisco, CA

5d•$180,000 - $240,000•Onsite

About The Position

Finix is hiring a Senior Security Engineer to secure the design, implementation, and operation of its cloud and corporate environments. The role is part of the Engineering organization and works closely with Engineering, Information Security, Compliance, and IT. This is an in-office position based in Finix’s San Francisco office. The Security Engineer partners with Engineering on secure product design and implementation, protects AWS infrastructure and workstations, and leads security incident response. The role also coordinates penetration tests, vulnerability scanning, and the bug bounty program; secures CI/CD pipelines and the software supply chain; and owns PCI architecture in partnership with Engineering. Additional work includes supporting HSM operations, maintaining regulatory controls, assisting with audits and customer questionnaires, and securing internal AI tooling while establishing company-wide AI use guardrails.

Requirements

At least 5 years of security engineering experience, preferably in cloud-native fintech or payments.
Development experience in Java.
Strong AWS experience, including security services and infrastructure.
Hands-on vulnerability remediation experience.
Incident response experience.
Clear written and verbal communication, including presenting findings and recommendations to technical and non-technical audiences.
Working knowledge of PCI DSS and other regulatory frameworks.
Cryptography and key management experience.

Nice To Haves

AWS Security Specialty, CISSP, or similar certification.
Bug bounty and hands-on penetration testing experience.
CI/CD pipeline experience.
Infrastructure as code experience, such as Terraform.
Experience with IAM and identity providers such as Okta.
Experience with CrowdStrike, Palo Alto Prisma Access, or Sonatype Nexus.

Responsibilities

Partner with Engineering on secure design and implementation of new features.
Secure AWS infrastructure and workstations, and lead security incident response.
Coordinate penetration tests, vulnerability scanning, and the bug bounty program; triage findings, lead fixes, and drive remediation with Engineering.
Secure CI/CD pipelines and the software supply chain.
Own PCI architecture with Engineering, including scoping, data handling, and secure SDLC.
Support HSM operations, key exchanges, and key injections.
Build and maintain controls for PCI DSS, SOC 2, and other regulations.
Support audit fieldwork and customer security questionnaires.
Secure internal AI tooling and establish guardrails for AI use across the company.