Senior Security Engineer

Responsibilities

Build and improve application security tooling, processes, and secure SDLC practices, while partnering with engineering to protect AI agent workflows and data privacy. Automate detection and vulnerability management, lead incident response, and support compliance and customer trust initiatives, including SOC 2, ISO 27001, and bank security requirements.

Requirements

Candidates should have four to eight years of application security experience, including at least three years of hands-on application or product security work as an individual contributor. A technical bachelor's degree, strong computer science fundamentals, and experience with TypeScript or JavaScript, AWS or GCP, secure SDLC, threat modeling, IAM, and application security are sought; familiarity with AI/LLM and cloud security is also expected.

Skills

• Application Security
• Secure Code Review
• Threat Modeling
• Penetration Testing
• Security Tooling
• TypeScript
• JavaScript
• AWS
• GCP
• Secure SDLC
• Identity and Access Management
• AI Security
• LLM Security
• Cloud Security
• Incident Response
• Vulnerability Management

About this role

About the Role
Join a growing AI-native fintech company as a hands-on security individual contributor. You will evolve its application security program and help protect AI agent workflows in a regulated banking environment, with room to grow into technical leadership.
What You'll Do
Build and mature application security tooling, processes, and secure SDLC practices that fit naturally into engineering workflows.
Partner with engineering to secure AI agent workflows, protect data privacy, and mitigate AI-specific vulnerabilities.
Automate security processes, including detection pipelines and vulnerability management, to reduce manual work.
Lead incident response and turn lessons from incidents into lasting improvements.
Support compliance and customer trust initiatives, including SOC 2, ISO 27001, and bank security requirements.
What We're Looking For
Four to eight years of application security experience, ideally in a fast-growing startup or company.
At least three years focused primarily on hands-on application or product security, such as secure code review, threat modeling, penetration testing, or security tooling.
Experience as an individual contributor whose work includes hands-on coding, rather than in a management role.
A bachelor's degree in a technical field and strong computer science fundamentals.
Experience with TypeScript, JavaScript, AWS or GCP, secure SDLC, threat modeling, IAM, and application security.
Familiarity with AI or LLM security and cloud security fundamentals.
Fintech or regulated B2B SaaS experience is helpful, as is ownership of SOC 2 or ISO 27001 compliance or building a security program from an early stage.
Compensation & Benefits
Base salary: $190,000 to $250,000 annually. Visa sponsorship is available.
Location
On-site in San Francisco, California, United States.