Software Engineer, Security

Apoynt • New York, NY

6d • Onsite

About The Position

We are a technology-forward global investment firm where engineering excellence drives competitive advantage. Our security team operates at the intersection of deep technical craft and the systems that keep the firm safe, and we're looking for a builder who thrives there. This is a software engineering role focused on building the internal products our security, compliance, and legal teams rely on every day. As the firm scales, the processes that govern security reviews and approvals need to run as real software, not spreadsheets and inboxes. We want that capability built in-house, with the persistent context and institutional knowledge no off-the-shelf tool can match.

Requirements

• A strong full-stack engineer who ships production internal tooling, Python-first, comfortable across the stack.
• Proven experience building workflow, case-management, or CRM-style applications, not just consumer-facing product.
• Hands-on with identity and access: you've built authentication and authorization into applications, and you're comfortable with IAM concepts and PKI/certificates.
• A security-minded builder: you write secure code and think about attack surface, but you ship product, you're not a reviewer or auditor who doesn't build.
• Able to work directly with compliance, legal, and security stakeholders and translate their processes into software.
• Bachelor's in Computer Science, Computer Engineering, or related field, or equivalent demonstrated experience.
• 4-5+ years of full-stack software engineering.
• Proficiency in Python; strong modern front-end skills (React/TypeScript).
• Practical experience implementing authentication and authorization, with working familiarity with identity systems and PKI/certificates.
• Strong written and verbal communication; able to work across technical and non-technical audiences.

Responsibilities

• Design, build, and own internal products that manage security reviews, compliance, and legal workflows: intake, triage, review stages, approvals, and audit trails.
• Ship full-stack: Python backend (Django/FastAPI) and a modern JavaScript/TypeScript front end (React).
• Own the identity and access layer inside the products you build: authentication (SSO, SAML, OIDC, OAuth, MFA), authorization (RBAC/ABAC, policy), provisioning (SCIM/IAM), and certificate and key management (PKI, mTLS).
• Partner directly with security, compliance, and legal stakeholders to turn manual, high-friction processes into reliable software.
• Build security in by default: threat modeling, least privilege, and secure SDLC as part of how you ship, not a step at the end.
• Integrate with internal systems and data sources; build the APIs, automation, and integrations that connect these workflows across the firm.
• Own reliability, observability, and the full lifecycle of the tools you deliver.

Benefits

• Excellent benefits package
• Competitive compensation package commensurate with experience.
• Comprehensive health, dental, and vision insurance.
• Opportunities for continuous professional development and training.
• A collaborative and challenging work environment with state-of-the-art technology.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level