AI · application security
ABOUT THE ROLE
Join a growing AI-focused fintech team to own and evolve its application security program. You will do hands-on security engineering while helping shape how the organization secures AI agent workflows in a regulated banking environment.
WHAT YOU'LL DO
- Build and mature security tooling, processes, and secure SDLC practices that fit naturally into engineering workflows.
- Partner with engineering teams to secure AI agent execution and agentic workflows, protect data privacy, and address AI-specific vulnerabilities.
- Automate security processes, including detection pipelines and vulnerability management.
- Lead incident response and turn incidents into lasting security improvements.
- Support customer trust and compliance efforts, including SOC 2, ISO 27001, and bank security requirements.
WHAT WE'RE LOOKING FOR
- Four to eight years of hands-on application security experience in a rapidly growing organization.
- Strong experience reviewing code, identifying and fixing vulnerabilities, penetration testing, and implementing secure coding practices.
- Currently an individual contributor focused on hands-on security engineering, with a technical bachelor's degree.
- Application security expertise, rather than a primary focus on IT, GRC, network security, or security operations.
- Experience with TypeScript or JavaScript, AWS or GCP, secure SDLC, threat modeling, IAM, and cloud security fundamentals.
- Fintech or regulated B2B SaaS experience is useful, as is experience owning SOC 2 Type II or ISO 27001 compliance or building a startup