Senior Security Engineer

Currently working with a fast-growing Series C fintech providing a payments processing system and embedded payments infrastructure for businesses, software platforms, and marketplaces. They enable their clients to accept online and in-person payments via phone, link, credit and debit cards, ACH, and digital wallets. They offer automated merchant onboarding and compliance checks and provide AI-driven fraud monitoring, dispute resolution and transaction reporting dashboards., At a $1+ billion valuation, they are continuing to grow and scale their product and are looking for a Senior Security Engineer to own their security function. You’ll work across infrastructure, application, implementation and operational security, partnering closely with engineering teams to ensure security scales alongside the platform, * Partner closely with Software Engineering teams to ensure security is incorporated into the design and development of new products and features.

• Secure and continuously improve the company’s AWS infrastructure, endpoints, and broader corporate technology environment.
• Lead and support security incident response, including investigation, remediation, and implementation of preventative measures.
• Manage security testing initiatives, including penetration testing, vulnerability scanning, and bug bounty programs.
• Triage security findings and work directly with engineering teams to drive vulnerability remediation.
• Strengthen the security of CI/CD pipelines and the software supply chain.
• Help define and maintain secure architecture around payment systems, sensitive data, and the software development lifecycle (SDLC).
• Support HSM operations, cryptographic key management, key exchanges, and key injections.
• Build and maintain security controls supporting PCI DSS, SOC 2, and other relevant regulatory frameworks.
• Support security audits and respond to security requirements from enterprise customers.
• Help secure internal AI tooling and establish appropriate security guardrails around the use of AI across the organization., * Join a high-growth fintech business solving complex technical challenges within payments infrastructure.
• Work on security problems that directly impact high-volume, production-critical financial systems.
• Have broad ownership across application security, cloud security, infrastructure security, incident response, and compliance rather than being restricted to one area of security.
• Work closely with engineering teams and have a direct influence on how security is designed into products from the ground up.
• Gain exposure to highly relevant areas including AWS security, payments security, cryptography, PCI DSS, software supply chain security, and AI security.
• Take on a highly visible role where security is critical to the company’s ability to scale its platform and products.
• Be part of a highly collaborative team, working in-office in San Francisco

• 5+ years of experience in Security Engineering, ideally within fintech, payments, or another cloud-native technology environment.
• Strong hands-on experience securing AWS environments, including AWS security tooling and infrastructure.
• Software development experience with Java.
• Demonstrable experience identifying and remediating security vulnerabilities.
• Hands-on experience with security incident response.
• Knowledge of PCI DSS and other security or regulatory frameworks.
• Experience with cryptography, HSMs, and/or key management.
• Strong written and verbal communication skills, with the ability to communicate security risks and recommendations to both technical and non-technical stakeholders.
• Experience with areas such as CI/CD security, Infrastructure as Code (Terraform), IAM, identity providers, penetration testing, or bug bounty programs is advantageous.
• Relevant security certifications such as CISSP or AWS Security Specialty are a plus.