Назад
Company hidden
3 дня назад

Senior Application Security Engineer (Fintech)

213 000 - 295 000$
Формат работы
hybrid
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Senior Application Security Engineer (Fintech): Building and improving security capabilities, automation, and guardrails for mobile applications, APIs, and backend services with an accent on mobile security, architecture reviews, and vulnerability remediation. Focus on penetration testing, secure authentication and authorization, static and dynamic analysis, and implementing production-grade AI security controls.

Location: San Francisco, CA, USA; hybrid work with four days per week in the office and Fridays from home for employees near an office

Base salary: $213,000–$295,000 per year, plus bonus, equity, and benefits.

Company

hirify.global is a financial technology company providing user-friendly financial tools and platforms that help members make progress toward their financial goals.

What you will do

  • Build and improve security capabilities, automation, and guardrails for iOS, Android, API, and backend services.
  • Perform application and API/backend penetration testing and identify, triage, and remediate vulnerabilities.
  • Partner with engineering and product teams to embed security into the development lifecycle.
  • Conduct architecture and code reviews focused on secure data storage, authentication, authorization, communications, and session/token handling.
  • Use AI to accelerate code reviews, vulnerability triage, and threat modeling.
  • Define and implement production-grade security controls for AI-enabled features.

Requirements

  • 5+ years of application security experience across mobile and backend systems.
  • Hands-on production experience securing iOS and Android applications.
  • Strong understanding of mobile threat models, attack techniques, and platform security features and limitations.
  • Experience with mobile security testing, including static and dynamic analysis.
  • Practical coding experience, preferably with Ruby, Go, or Python.
  • Ability to communicate security risks, tradeoffs, and remediation guidance to engineering partners.

Culture & Benefits

  • Hybrid office policy with four office days and Fridays from home near company offices; a fully remote program is also available for eligible employees.
  • Comprehensive health, financial, and wellbeing benefits.
  • Generous vacation policy, company-wide paid days off, and paid parental leave.
  • Backup child, elder, and pet care, subsidized commuter benefits, family planning reimbursement, and an annual wellness stipend.
  • Bonus eligibility and a competitive equity package for full-time employees.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →