Principal Security Engineer (Fintech)

Location: Open to candidates in New York City, Chicago, Austin, Dallas, Denver, Miami, the San Francisco Bay Area, or Seattle. New York and Chicago require regular office attendance on a cadence set by the Hiring Manager/Team; Austin, Dallas, Denver, Miami, San Francisco, and Seattle are fully remote with occasional office visits. Remote work outside these locations is not available. Candidates must already be authorized to work for any employer in the United States; visa sponsorship is not provided.

Pay range: $215,000–$235,000 USD annually.

Company

hirify.global is a global B2B fintech company providing an API-based platform for investing and trading, including fractional shares, equities, mutual funds, ETFs, fixed income, and options.

What you will do

• Design reusable security architecture patterns, automated guardrails, infrastructure-as-code controls, and measurable security improvements.
• Secure AWS, EKS, EC2, DynamoDB, Kubernetes, colocated infrastructure, low-latency trading systems, endpoints, identities, and SaaS applications.
• Embed threat modeling, API security, security testing, image signing, policy enforcement, and runtime protection into CI/CD and GitOps workflows.
• Build and maintain SIEM, SOAR, endpoint security, vulnerability management, telemetry, detection, and automated response capabilities.
• Support threat hunting and incident response through containment automation and post-incident hardening.
• Translate regulatory and privacy requirements into tested controls, automate audit evidence, and maintain data discovery, classification, encryption, retention, and deletion capabilities.

Requirements

• 10+ years of relevant security, software, or infrastructure engineering experience, including leadership of complex security initiatives from architecture through production operation.
• Deep practical expertise in AWS and Kubernetes security, including IAM, workload identity, networking, container protection, and secure data access.
• Strong working knowledge of endpoint, identity, and SaaS security across Windows and macOS.
• Strong software and automation skills in Python or a comparable language, plus practical experience with Terraform, CI/CD, GitOps, and security as code.
• Experience building and operating security platforms, telemetry pipelines, detections, and response automation with attention to data quality, reliability, and maintainability.
• Sound architectural judgment, troubleshooting skills, risk prioritization, initiative management, cross-functional influence, and mentoring ability.
• Experience in regulated financial services or another environment with demanding availability and audit requirements; familiarity with NIST CSF or SP 800-53 is required.
• Bachelor’s degree in a related field or equivalent practical experience.

Nice to have

• Experience with Okta, JumpCloud, or comparable platforms.
• Brokerage, SEC/FINRA, and privacy compliance experience.
• Relevant security, AWS, Kubernetes, or GIAC certifications.

Culture & Benefits

• Fintech startup pace combined with Wall Street stability, institutional-grade execution, and regulatory discipline.
• Competitive compensation, equity, and a 401(k) match.
• Medical, dental, vision, and disability insurance, plus paid parental leave.
• Wellness reimbursement, company-provided phone, personal development allowance, generous PTO, and observed holidays.
• New York, Chicago, and Lithuania teams work in the office on a hybrid schedule.

Hiring process

• Selected candidates can discuss compensation philosophy and available benefits with a recruiter during the interview process.
• Employment offers are contingent on providing documentation confirming the legal right to work in the United States.