Senior Security Engineer

Responsibilities

You will build and mature application security tooling and processes while securing AI agent workflows in a regulated fintech environment. Additionally, you will lead incident response efforts and ensure compliance with standards like SOC 2 and ISO 27001.

Requirements

The role requires four to eight years of application security experience, including hands-on coding and a bachelor's degree in a technical field. Candidates must have strong fundamentals in secure SDLC, threat modeling, and cloud security, specifically with AWS or GCP.

Skills

• Application security
• Secure SDLC
• TypeScript
• JavaScript
• AWS
• GCP
• DevSecOps
• Threat modeling
• IAM
• Penetration testing
• Secure code review
• Vulnerability management
• Incident response
• Compliance
• SOC 2
• ISO 27001

Benefits

• Visa sponsorship

About this role

About the Role
Join a growing AI-focused fintech team as a hands-on Senior Security Engineer. You will evolve the application security program and help secure AI agent workflows in a regulated banking environment.
What You'll Do
Build and mature application security tooling, processes, and secure SDLC practices that fit naturally into engineering workflows.
Partner with engineering to design secure agentic workflows, protect data privacy, and address AI-specific vulnerabilities.
Automate security processes, including detection pipelines and vulnerability management.
Lead incident response and turn lessons from incidents into lasting security improvements.
Support compliance and customer trust efforts, including SOC 2, ISO 27001, and bank security requirements.
What We're Looking For
Four to eight years of application security experience, including hands-on work in a fast-growing organization.
A bachelor's degree in a technical field and strong software security fundamentals.
At least three years focused primarily on application or product security, such as secure code review, threat modeling, penetration testing, or security tooling.
Current individual contributor experience, with hands-on coding as a core part of the role.
Experience with TypeScript or JavaScript, AWS or GCP, secure SDLC, DevSecOps, threat modeling, and IAM.
Background in fintech, regulated B2B SaaS, AI or LLM security, or cloud security is valuable.
Experience owning SOC 2 Type II or ISO 27001 compliance, or building a security program at a startup, is a plus.
Compensation & Benefits
Base salary: $190,000 to $250,000 USD annually. Visa sponsorship is available.
Location
On-site in San Francisco, California, United States.