Sr. Staff Engineer, SOC

Today, through BHN’s single global platform, businesses of all kinds can tap into the world’s largest network of branded payment solutions. BHN helps businesses grow revenue, increase loyalty, motivate and reward their teams, disburse funds and engage consumers. Branded payment solutions include the issuance and distribution of gift cards, egifts, corporate payouts and rewards, along with the technology to deliver these products in seamless, integrated ways. BHN’s network spans the globe with more than 400,000 consumer touchpoints. Learn more at BHN.com.

• →Embed security into the SDLC, including requirements, design, development, and deployment phases. 

• →Define and promote secure coding practices across engineering teams. 

• →Perform security design reviews, threat modeling, and architecture assessments for applications, APIs, and microservices. 

• Collaborate with cloud engineering teams to secure AWS environments, leveraging tools like GuardDuty, CloudTrail, Macie, and AWS Config. 

• Ensure application security controls extend seamlessly into cloud-native workloads. 

• Conduct vulnerability assessments using SAST, DAST, and software composition analysis (SCA). 

• Analyze findings, prioritize remediation, and track to resolution. 

• Develop and implement risk mitigation strategies aligned with business needs. 

• Partner with engineering, DevOps, and product teams to raise security maturity. 

• Mentor junior engineers and advocate for a security-first mindset. 

• Strong background in secure coding practices, API security, and software architecture. 

• Hands-on experience with tools like SAST, DAST, SCA, and fuzzing platforms. 

• Solid understanding of AWS services (IAM, Lambda, S3, VPC) and AWS-native security tooling. 

• Experience securing containerized and microservice-based environments. 

• Ability to influence cross-functional teams and communicate effectively with technical and non-technical stakeholders. 

• Strong problem-solving, analytical, and risk prioritization skills. 

• Relevant certifications such as CISSP, CSSLP, or AWS Security Specialty preferred. 

• Familiarity with security standards and frameworks (OWASP, NIST, ISO 27001).