Senior Information Security Engineer

• →Design, build, and operate secure services and integrations using APIs across security tools, identity, endpoint management, cloud platforms, email, ticketing, and HR systems.
• →Create reliable asset, identity, and application data models by matching and reconciling records across multiple systems.
• →Build data pipelines and controls that identify devices missing required security capabilities and help drive those gaps to closure.
• →Measure multifactor authentication (MFA) and access-policy compliance, identify weak or missing controls, and rank findings by risk.
• →Turn security and identity signals into actionable workflows for security engineering, detection, and infrastructure teams.
• →Automate repeatable security workflows that native tools cannot handle, using validation, least-privilege access, approvals where needed, logging, and safe rollback.
• →Build reporting, dashboards, and metrics that provide an accurate, queryable view of security posture and operational performance.
• →Run integrations and automation as production software: secure design, source control, automated tests, CI/CD, monitoring, documentation, and safe rollback.
• →Partner with security engineers in the US, Romania, and India to translate operational problems into reliable services, integrations, and automation.

• Security data from the major technology sources is reconciled into a reliable view that matches operational reality.
• Every day, we can identify devices missing required security controls and users with weak or missing MFA, with findings prioritized by risk.
• High-value, repeatable security workflows are automated safely, with appropriate controls, auditability, and a way to undo changes.
• Leadership and engineering teams can access accurate security reports and metrics on demand, without manual spreadsheet work.
• The automation layer is observable, maintainable, and extensible, improving the visibility and maturity of the security program.

• Five or more years as a software developer, with a track record of designing, building, and running applications in production.
• Strong Python skills and experience with service/API development, relational databases, and modern web technologies such as React or a similar front-end framework.
• Deep experience integrating with REST and GraphQL APIs, including authentication, pagination, rate limits, and error handling.
• Strong database and data modeling skills, including turning messy data from many sources into one reliable record.
• Solid engineering habits: version control, automated testing, code review, continuous integration and deployment, and documentation.
• Secure software development practices, including secrets management, access control, input validation, audit logging, and protection of sensitive data.
• Working knowledge of security concepts such as endpoint protection, identity and MFA, email security, and vulnerability management, and the drive to go deep fast.
• Clear written and spoken English, and comfort working closely with US colleagues across time zones.

• Experience integrating with security, identity, endpoint, email, or cloud APIs such as CrowdStrike Falcon or Microsoft Graph.
• Experience building an asset inventory, CMDB, data platform, or data-reconciliation service.
• Experience with a security orchestration, automation, and response (SOAR) platform.
• Experience applying AI agents or other intelligent techniques to workflow automation, data reconciliation, or operational analysis.

• You hold yourself to a world-class standard, and it shows in everything you deliver.
• You are a self-starter. You find the work that matters and finish it without being asked.
• You care about this field beyond the job description. You keep learning and building on your own because you enjoy it, and you put in the extra effort when the mission calls for it.
• You bring drive, ambition, and a positive attitude to hard problems.
• You make the people around you better. You share what you know, you never make anyone feel small, and you let your work speak for itself.

Our security team spans the United States, Romania, and India and protects the platforms that banks and wealth managers rely on every day.  We hold a high bar, and we hold it together.  The people on this team own their work from start to finish, keep learning because they want to, and make the people around them better.  We do not reward the loudest voice in the room.  We reward the best work, delivered with respect for the people it affects.