Software Engineer, Security

Slash Financial•San Francisco, CA

1d•$250,000 - $350,000•Onsite

About The Position

Slash is building the future of business banking, one industry at a time. We believe businesses deserve financial infrastructure tailored to how they operate. We combine the reliability of traditional banking with industry-specific features that make businesses more efficient, competitive, and profitable. Slash is one of the fastest growing fintechs, powering over ten billion dollars in business purchasing annually. We recently raised a $100M Series C, accelerating our expansion. Slash is headquartered in San Francisco and has a strong in-person culture. Slash is a technology company on a mission to build the best engineering team. We are looking for a Software Engineer to own and scale the security of our platform. You will be responsible for keeping our systems secure across the entire stack, from network and infrastructure to application-level security, while establishing patterns and guardrails for the team to move quickly without security concerns. You will define and own our security program end-to-end, playing a key role in enabling Slash to serve billions of dollars in business spend reliably and securely.

Requirements

Is a security generalist — knowledgeable across the stack, from infrastructure to application code
Can think through, understand, reason about, and work on our platform and infra (Kubernetes/EKS, CockroachDB, Kafka, Terraform/Pulumi, AWS) — while spending their day-to-day 100% focused on improving our security
Is organized and able to coordinate pen tests, audits, and competing security priorities
Has proficiency in TypeScript or another object-oriented language
Can find gaps and drive high-impact changes independently, without waiting to be told what to work on

Nice To Haves

Current or recent founder in the security space
2–5 years of experience with rapid promotion to senior/staff level at companies with a high bar for security

Responsibilities

Own Slash's security program end-to-end — find gaps, prioritize, and propose and drive changes independently
Work on network security: manage and harden our Cloudflare implementation, AWS WAF, VPC networking, and overall infrastructure posture
Work on application security: ship features like passkey authentication, SMS rate limiting, and other product-level hardening
Manage recurring pen tests and our bug bounty program, and coordinate remediation across engineering
Assist on compliance efforts like PCI and SOC 2
Establish security patterns, tooling, and guardrails that enable the rest of the team to move fast safely
Own corporate IT security, including keeping company equipment and endpoints secure
Interface with customers, internal stakeholders, and key vendors to answer questions and provide confidence in Slash's security practices