> Markdown version of [/jobs/ext/2722579-security-engineer](https://www.wearedevelopers.com/jobs/ext/2722579-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Security Engineer

- **Company:** Bright Market, LLC
- **Location:** United States (Remote available)
- **Experience:** Expert
- **Salary:** $155,000.0 - $187,000.0
- **Contract:** Permanent contract
- **Skills:** Java (Programming Language), Amazon Web Services, Cloud Computing Security, Continuous Integration, Programming Tools, Identity and Access Management, Java Virtual Machine (JVM), Key Management, PCI Data Security Standards, Software Security, Amazon Virtual Private Cloud (VPC), Static Application Security Testing, Dynamic Application Security Testing
- **Published:** September 4, 2026
- **Apply:** https://startup.jobs/sr-security-engineer-fastspring-9563837

## About the Role

* 7+ years of hands-on security engineering experience (application security, cloud security, or infrastructure security)
 * Strong experience with AWS security services and primitives (IAM, VPC networking, secrets management)
 * Experience working in and securing large production codebases; JVM ecosystem experience preferred
 * Familiarity with modern AI-assisted development tools and an interest in their security implications
 * Strong prioritization and communication skills; ability to advocate for security investments with stakeholders
 * Experience in payments, fintech, or other regulated environments is a plus
 * Relevant certifications (e.g., CISSP, OSCP, AWS Security Specialty) are a plus but not required

Nice to Have

 * Security certifications (e.g., AWS Security Specialty, CISSP, OSCP, GIAC).
 * Experience securing payments, ecommerce, or subscription/billing platforms.
 * Experience with secure SDLC practices and integrating security tooling (SAST/DAST/SCA) into CI/CD.
 * Familiarity with global, multi-currency, or tax-calculation systems and their data-sensitivity considerations.

## Description

We are seeking a Sr. Security Engineer to join our Agentic Experience group, reporting to the Principal Engineer, Agentic Development. In this role, you will strengthen the security posture of our core payments platform while helping shape security practices for AI-assisted software development. You will work closely with our Agentic Experience group and our CISO, with visibility to executive leadership. This is a hands-on engineering role with broad scope: application security, cloud infrastructure security, and security review of AI/agentic development tooling., * Identify, prioritize, and remediate vulnerabilities across our Java-based platform and AWS infrastructure

 * Drive infrastructure security improvements, including IAM policy refinement, instance metadata protections, and network egress controls
 * Conduct security reviews of AI-assisted development pipelines, tool integrations, and agent-accessible services
 * Develop and maintain secure development standards, patterns, and guardrails for engineering teams
 * Partner with the fractional CISO on risk assessment, remediation planning, and compliance initiatives (including PCI DSS)
 * Contribute to incident response readiness and security monitoring improvements
 * Communicate security priorities and progress clearly to technical and executive stakeholders


## Related Videos

- [Software Security 101: Secure Coding Basics](https://www.wearedevelopers.com/videos/220-software-security-101-secure-coding-basics)
- [This Machine Ends Data Breaches](https://www.wearedevelopers.com/videos/574-this-machine-ends-data-breaches)
- [AI Pair Programming with GitHub Copilot at SAP: Looking Back, Looking Forward!](https://www.wearedevelopers.com/videos/1546-ai-pair-programming-with-github-copilot-at-sap-looking-back-looking-forward)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Security Blindspots and How to Learn About Them - Anna Oliveira](https://www.wearedevelopers.com/videos/1754-security-blindspots-and-how-to-learn-about-them-anna-oliveira)
- [Unleashing the Power of Developers: Why Cybersecurity is the Missing Piece?!?](https://www.wearedevelopers.com/videos/712-unleashing-the-power-of-developers-why-cybersecurity-is-the-missing-piece)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)
- [Best Countries for Software Engineers](https://www.wearedevelopers.com/magazine/267-best-countries-for-software-engineers)
- [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)