Senior Security Engineer (Fintech)

Location: Remote, United States

Salary: $170K–$300K annually, depending on hiring location and level.

Company

hirify.global builds AI-native tooling to automate mortgage workflows and simplify home-buying for lenders and borrowers.

What you will do

• Lead hirify.global’s security posture across application security, cloud security, identity, compliance, and internal tooling.
• Conduct threat modeling, vulnerability assessments, and penetration testing, then partner with engineering to remediate findings.
• Harden AWS infrastructure, including IAM, VPC boundaries, Secrets Manager, CloudTrail, GuardDuty, Security Hub, KMS, and DDoS protection.
• Build security automation and integrate SAST, DAST, dependency scanning, container scanning, SBOM management, and secret detection into CI/CD.
• Own the SOC 2 Type II program, including control design, evidence automation, auditor coordination, and continuous improvement.
• Drive incident response, secure SDLC practices, identity and access infrastructure, endpoint security, vendor risk management, documentation, and developer education.

Requirements

• Deep application security experience, including threat modeling, OWASP Top 10, secure code review, SAST/DAST tooling, and direct remediation support.
• Strong AWS security experience with IAM, VPC, GuardDuty, Security Hub, CloudTrail, KMS, Secrets Manager, and WAF.
• Proficiency with Terraform and/or Pulumi and an understanding of infrastructure-as-code security implications.
• Hands-on SOC 2 experience designing controls, collecting evidence, and managing auditor relationships.
• Experience integrating security tooling into CI/CD pipelines.
• Fintech or regulated-industry experience, with understanding of security, compliance, and data privacy in lending or financial services.
• Identity and access experience with SSO/SAML, SCIM, MFA enforcement, hardware security keys, and access reviews.
• Familiarity with protecting sensitive personal and financial data, including encryption at rest and in transit, data classification, and minimization.
• Strong written communication and scripting or automation skills using Python, Bash, or similar.

Nice to have

• Experience with the listed infrastructure and application stack, including Docker, ECS, Fargate, Aurora PostgreSQL, Redis, Kafka, OpenSearch, Buildkite, Datadog, CloudWatch, Sentry, Cloudflare, TypeScript, Node/Express, React, GraphQL/Apollo, and GitHub.

Culture & Benefits

• Remote-first culture with flexibility to work from wherever the best work can be done.
• Collaborative environment with open communication and close partnership between security, engineering, operations, and leadership.
• Flexible time off.
• Medical coverage with 100% of employee and family premiums covered.
• Vision and dental coverage, 401(k), and HSA/FSA.