Senior Security Engineer
- San Francisco, CA, United States
$190,000 to $250,000 USD / year
Applications open in a new tab.
Job details
- Pay
- $190,000 to $250,000 USD / year
- Posting language
- English
- Posted
Original job description
ABOUT THE ROLE
Join a growing AI-focused fintech team as a hands-on Senior Security Engineer. You will evolve the application security program and help secure AI agent workflows in a regulated banking environment.
WHAT YOU'LL DO
- Build and mature application security tooling, processes, and secure SDLC practices that fit naturally into engineering workflows.
- Partner with engineering to design secure agentic workflows, protect data privacy, and address AI-specific vulnerabilities.
- Automate security processes, including detection pipelines and vulnerability management.
- Lead incident response and turn lessons from incidents into lasting security improvements.
- Support compliance and customer trust efforts, including SOC 2, ISO 27001, and bank security requirements.
WHAT WE'RE LOOKING FOR
- Four to eight years of application security experience, including hands-on work in a fast-growing organization.
- A bachelor's degree in a technical field and strong software security fundamentals.
- At least three years focused primarily on application or product security, such as secure code review, threat modeling, penetration testing, or security tooling.
- Current individual contributor experience, with hands-on coding as a core part of the role.
- Experience with TypeScript or JavaScript, AWS or GCP, secure SDLC, DevSecOps, threat modeling, and IAM.
- Background in fintech, regulated B2B SaaS, AI or LLM security, or cloud security is valuable.
- Experience owning SOC 2 Type II or ISO 27001 compliance, or building a security program at a startup, is a plus.
COMPENSATION & BENEFITS
Base salary: $190,000 to $250,000 USD annually. Visa sponsorship is available.
LOCATION
On-site in San Francisco, California, United States.
More about this job
Skills
- Incident response
- Regulatory compliance
- Security regulations
- Penetration testing
- TypeScript
- JavaScript
- AWS
- Google Cloud
- Identity and access management