Senior Security Engineer
- San Francisco, CA, United States
$190,000 to $250,000 USD / year
Applications open in a new tab.
Job details
- Pay
- $190,000 to $250,000 USD / year
- Posting language
- English
- Posted
Original job description
ABOUT THE ROLE
Join a growing AI-focused fintech team to own and evolve its application security program. You will do hands-on security engineering while helping shape how the organization secures AI agent workflows in a regulated banking environment.
WHAT YOU'LL DO
- Build and mature security tooling, processes, and secure SDLC practices that fit naturally into engineering workflows.
- Partner with engineering teams to secure AI agent execution and agentic workflows, protect data privacy, and address AI-specific vulnerabilities.
- Automate security processes, including detection pipelines and vulnerability management.
- Lead incident response and turn incidents into lasting security improvements.
- Support customer trust and compliance efforts, including SOC 2, ISO 27001, and bank security requirements.
WHAT WE'RE LOOKING FOR
- Four to eight years of hands-on application security experience in a rapidly growing organization.
- Strong experience reviewing code, identifying and fixing vulnerabilities, penetration testing, and implementing secure coding practices.
- Currently an individual contributor focused on hands-on security engineering, with a technical bachelor's degree.
- Application security expertise, rather than a primary focus on IT, GRC, network security, or security operations.
- Experience with TypeScript or JavaScript, AWS or GCP, secure SDLC, threat modeling, IAM, and cloud security fundamentals.
- Fintech or regulated B2B SaaS experience is useful, as is experience owning SOC 2 Type II or ISO 27001 compliance or building a startup security program.
- Interest in AI and LLM security is valuable.
COMPENSATION & BENEFITS
Base salary: $190,000 to $250,000 annually. Visa sponsorship is available.
LOCATION
On-site in San Francisco, California.
More about this job
Skills
- Incident response
- Regulatory compliance
- Security regulations
- Penetration testing
- TypeScript
- JavaScript
- AWS
- Google Cloud
- Identity and access management