> Markdown version of [/jobs/ext/2723054-software-engineer-security](https://www.wearedevelopers.com/jobs/ext/2723054-software-engineer-security). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Software Engineer, Security - **Company:** Slash Financial, Inc. - **Location:** San Francisco, CA, United States - **Experience:** Experienced - **Contract:** Permanent contract - **Skills:** Amazon Web Services, Cyber Security, Network Security, Object-Oriented Software Development, TypeScript, Pulumi, Software Security, Amazon Virtual Private Cloud (VPC), Rate Limiting, Kubernetes, Cloudflare, Apache Kafka, Terraform - **Published:** September 4, 2026 - **Apply:** https://startup.jobs/software-engineer-security-slash-com-8991741 ## About the Role * Is a security generalist - knowledgeable across the stack, from infrastructure to application code * Can think through, understand, reason about, and work on our platform and infra (Kubernetes/EKS, CockroachDB, Kafka, Terraform/Pulumi, AWS) - while spending their day-to-day 100% focused on improving our security * Is organized and able to coordinate pen tests, audits, and competing security priorities * Has proficiency in TypeScript or another object-oriented language * Can find gaps and drive high-impact changes independently, without waiting to be told what to work on * Potentially fits one of two archetypes: * Current or recent founder in the security space * 2-5 years of experience with rapid promotion to senior/staff level at companies with a high bar for security ## Description Slash is, at its core, a technology company and is on a mission to build the best engineering team in the world. We're looking for a Software Engineer to own and scale the security of our platform as we grow fast. You'll be responsible for keeping our systems secure across the entire stack - from network and infrastructure to application-level security - while establishing the patterns and guardrails that let the rest of the team move quickly without having to worry about security. You'll define and own our security program end-to-end, and play a key role in enabling Slash to serve billions of dollars in business spend reliably and securely. What you'll do * Own Slash's security program end-to-end - find gaps, prioritize, and propose and drive changes independently * Work on network security: manage and harden our Cloudflare implementation, AWS WAF, VPC networking, and overall infrastructure posture * Work on application security: ship features like passkey authentication, SMS rate limiting, and other product-level hardening * Manage recurring pen tests and our bug bounty program, and coordinate remediation across engineering * Assist on compliance efforts like PCI and SOC 2 * Establish security patterns, tooling, and guardrails that enable the rest of the team to move fast safely * Own corporate IT security, including keeping company equipment and endpoints secure * Interface with customers, internal stakeholders, and key vendors to answer questions and provide confidence in Slash's security practices ## Related Videos - [Why segmenting your infrastructure into tiers makes your infrastructure design better](https://www.wearedevelopers.com/videos/1960-why-segmenting-your-infrastructure-into-tiers-makes-your-infrastructure-design-better) - [Do TypeScript without TypeScript](https://www.wearedevelopers.com/videos/327-do-typescript-without-typescript) - [Infrastructure as Code: The Developer's Secret Weapon](https://www.wearedevelopers.com/videos/1221-infrastructure-as-code-the-developer-s-secret-weapon) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [Terraform for Developers](https://www.wearedevelopers.com/videos/3-terraform-for-developers) - [Implementing Feature Environments with AWS and Terraform](https://www.wearedevelopers.com/videos/531-implementing-feature-environments-with-aws-and-terraform) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [The Best X (Twitter) Accounts for Developers](https://www.wearedevelopers.com/magazine/294-the-best-x-twitter-accounts-for-developers) - [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)