Head of Security (Fintech)

Location: Remote in LATAM

Company

hirify.global is a financial-infrastructure company building a cross-border payments platform with stablecoin payment rails and local cash-outs for digital entrepreneurs in the Global South.

What you will do

• Define and own a risk-based security strategy and roadmap for a financial platform, reporting security posture to executive leadership and the board.
• Lead detection, response, recovery, runbooks, post-incident reviews, and escalation for high-stakes security incidents.
• Embed application security into the SDLC through threat modeling, secure design reviews, SAST/DAST, dependency scanning, and secure coding standards.
• Partner with Infrastructure to secure AWS, Kubernetes, networking, IAM, secrets, CI/CD, Terraform, and GitOps workflows.
• Own detection and monitoring, crypto and key security, fraud and account-security collaboration, compliance, vendor risk, vulnerability remediation, and security assurance.
• Hire, mentor, and lead security engineers; build a security champions network and define safe adoption of AI coding tools, agents, and LLM-powered systems.

Requirements

• 8+ years of experience in information or application security, including 3+ years leading security teams or functions.
• Experience leading incident response for real, high-stakes incidents, including coordination with external forensics and counsel.
• Strong knowledge of AWS security and Kubernetes security, including IAM, network segmentation, RBAC, secrets management, container security, and image security.
• Hands-on application-security experience in a microservices environment, including threat modeling, secure code review, dependency risk, and software supply-chain risk.
• Experience building detection and monitoring capabilities using SIEM, log analysis, alerting, and Datadog or similar tools.
• Experience owning or leading a compliance program such as SOC 2, ISO 27001, or PCI-DSS, including audit cycles.
• Ability to read and review TypeScript/Node.js code and Terraform infrastructure-as-code.
• Experience securing CI/CD pipelines and software supply chains.
• Hands-on experience with AI-assisted tools such as Claude Code, Cursor, or GitHub Copilot for security work, with a clear view of AI-generated-code and agentic-system risks.
• Strong communication skills for explaining risk to engineers, executives, regulators, and customers and for writing policies and runbooks.
• Sound judgment under pressure and the ability to make fast, defensible decisions with incomplete information.

Nice to have

• Fintech, payments, remittance, or crypto experience, especially in key management, custody, or blockchain security.
• Experience with fraud, account takeover, abuse prevention, AI agents, and LLM-powered systems in production.
• Offensive security experience, including penetration testing, red teaming, or bug bounty programs.
• Experience with CSPM, runtime protection, and policy-as-code tools such as OPA or Kyverno.
• Familiarity with money-transmission and financial-services regulations across multiple jurisdictions.
• Security certifications such as CISSP, CISM, OSCP, or AWS Security Specialty.
• Experience supporting investor, buyer, or enterprise security due diligence.
• Experience building a security function from a small base in a fast-growing engineering organization.

Culture & Benefits

• Remote work from LATAM within autonomous product teams.
• Security operates as an engineering partner that builds guardrails and paved roads rather than end-stage gates.
• Emphasis on ownership, calm incident communication, practical risk judgment, and cross-functional collaboration.
• Opportunity to shape security practices for cross-border payments, crypto infrastructure, and AI-assisted development.