Application Security Engineer (Fintech)

Location: Remote across the United States and Canada; hybrid schedule required for employees living within 30 miles of an office location. Hiring is currently limited to specified US states and Ontario, Alberta, and British Columbia.

Company

hirify.global provides payment tokenization, credential management, and trust infrastructure for commerce, financial institutions, merchants, fintech companies, and AI companies.

What you will do

• Integrate SAST, DAST, and SCA security controls into GitHub and GitLab CI/CD pipelines.
• Design and maintain developer-friendly Secure SDLC processes, frameworks, and STRIDE-based threat modeling practices.
• Manage the private bug bounty program, triage vulnerability reports, track spending, and reduce Mean Time to Mitigation.
• Conduct threat modeling and secure code reviews for Java and Python microservices.
• Deliver secure coding training and build a Security Champions network across Engineering.
• Support technical security communications, vulnerability disclosures, and security engineering content.

Requirements

• 3–5+ years of dedicated Application Security and/or full-stack development experience.
• Practical experience assessing the security of Java and Python applications.
• Experience integrating SAST and DAST tools such as GitHub Advanced Security, ZAP, Burp, Synopsys, Veracode, and Semgrep into CI/CD systems.
• Hands-on experience operating bug bounty programs and defining program metrics and KPIs.
• Practical experience applying threat modeling frameworks such as STRIDE.
• Strong communication skills and the ability to build trust across engineering teams.

Nice to have

• BA or BS degree.
• Experience in a fast-paced startup environment.
• Experience with cloud-native, high-growth, or pre-IPO fintech startups.
• Hands-on experience with AWS security controls and cloud infrastructure.
• Experience working in fully remote, globally distributed environments.

Culture & Benefits

• Remote-first work with remote and hybrid opportunities and flexible working hours.
• Hybrid collaboration and in-person events for employees near an office.
• Medical, dental, vision, life, disability, and pet insurance, with HSA/FSA options.
• Flexible PTO, paid national holidays, and a global parental leave program.
• 401(k) with a 4% match and immediate vesting for US employees, plus early equity.
• Internet, learning, and office setup stipends, along with team events and professional development programs.