Назад
Company hidden
6 дней назад

Senior Security Engineer (Fintech)

180 000 - 240 000$
Формат работы
onsite
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Senior Security Engineer (Fintech): Securing cloud and corporate environments, payment infrastructure, and internal AI tooling with an accent on AWS security, PCI architecture, incident response, and cryptographic key management. Focus on coordinating vulnerability remediation, securing CI/CD and the software supply chain, supporting HSM operations, and building controls for PCI DSS and SOC 2.

Location: On-site in San Francisco, California, United States

Salary: $180,000–$240,000 per year, plus equity and benefits

Company

hirify.global is building a global operating system for fintech and payments, processing tens of billions of dollars annually for startups and publicly traded companies.

What you will do

  • Partner with Engineering on the secure design and implementation of new features.
  • Secure AWS infrastructure, workstations, corporate environments, CI/CD pipelines, and the software supply chain.
  • Lead security incident response and coordinate penetration testing, vulnerability scanning, bug bounty findings, fixes, and remediation.
  • Own PCI architecture with Engineering, including scoping, data handling, and secure SDLC practices.
  • Support HSM operations, key exchanges, and key injections.
  • Build and maintain controls for PCI DSS, SOC 2, and other regulations; support audits and customer security questionnaires.
  • Secure internal AI tooling and establish guardrails for AI use across the company.

Requirements

  • 5+ years of experience in security engineering, preferably in cloud-native fintech or payments.
  • Development experience in Java and strong AWS experience, including AWS security services and infrastructure.
  • Hands-on vulnerability remediation and incident response experience.
  • Clear written and verbal communication, including presenting findings and recommendations to technical and non-technical audiences.
  • Working knowledge of PCI DSS and other regulatory frameworks.
  • Experience with cryptography and key management.

Nice to have

  • AWS Security Specialty, CISSP, or a similar certification.
  • Bug bounty and hands-on penetration testing experience.
  • CI/CD pipeline experience.
  • Infrastructure as code experience with Terraform.
  • Experience with IAM and identity providers such as Okta.
  • Experience with CrowdStrike, Palo Alto Prisma Access, or Sonatype Nexus.

Culture & Benefits

  • Full-time, in-office work from the San Francisco office.
  • Equity and employee benefits are included in the compensation package.
  • Equal opportunity employer committed to diversity and non-discrimination.
  • Human review remains part of final hiring decisions when AI tools assist with application evaluation.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →