Security Engineer

Secure and maintain cloud infrastructure hosted on AWS, including identity and access management (IAM), network security, secrets management, logging, and monitoring.

Integrate security into the software development lifecycle through threat modeling, secure code reviews, and automated SAST, DAST, and dependency scanning within CI/CD pipelines.

Lead end-to-end vulnerability management, including discovery, assessment, prioritization, and remediation in collaboration with engineering teams.

Develop and maintain security detection and incident response capabilities, including alerting systems, investigation procedures, and operational runbooks.

Drive compliance initiatives and support frameworks such as SOC 2 Type II, ISO 27001, and GDPR, automating evidence collection wherever possible.

Respond to enterprise customer security questionnaires and participate in security assessments and reviews alongside commercial teams.

Manage third-party and vendor security risks, including evaluating AI providers, data vendors, and other integrated services.

Assess and strengthen the security of LLM-powered product features, addressing risks such as prompt injection, data leakage, and model access control.

Develop security awareness initiatives and promote practical security best practices across the organization.

Leverage AI tools and automation to improve security operations, streamline compliance activities, and increase the efficiency of security processes.

4 to 7 years of professional experience in security engineering, cloud security, or application security, preferably within a B2B SaaS environment.

Strong working knowledge of AWS security services and cloud infrastructure protection.

Experience with Infrastructure as Code (IaC) tools such as Terraform or similar technologies.

Solid understanding of web application and API security, including the OWASP Top 10.

Proficiency in writing code or scripts using Python, Go, or comparable programming languages to automate security tasks.

Experience supporting security compliance programs and audits, particularly SOC 2 and/or ISO 27001.

Strong practical experience using AI tools to accelerate everyday security work, including alert triage, code reviews, policy development, and compliance evidence automation.

Excellent communication skills, with the ability to explain technical risks and security requirements clearly to engineers, senior leadership, and enterprise customers.

Strong analytical thinking, problem-solving abilities, and a proactive approach to identifying and addressing security risks.

Experience securing LLM-powered applications, generative AI features, or AI agent workflows.

Background in fintech or other industries handling sensitive financial information.

Familiarity with security and compliance platforms such as Vanta, Drata, Wiz, Snyk, or equivalent solutions.

Relevant professional certifications such as OSCP, AWS Certified Security – Specialty, CISSP, or CCSP.

Previous experience as the first or founding security engineer within a startup or growing technology company.

Remote-first working environment with the flexibility to work from different locations.

High degree of autonomy, ownership, and trust in managing your responsibilities.

Transparent and collaborative company culture with open communication.

Opportunity to introduce new ideas, experiment with innovative approaches, and influence security strategy.

Customer-centric environment focused on continuous learning and product improvement.

Opportunity to take ownership of a broad security function and make a meaningful impact on enterprise-grade financial software.

Exposure to cloud security, AI-powered technologies, automation, and modern compliance practices.

Opportunity to work with a fast-growing, venture-backed technology business.