Quick overview
Job description
About the Role
Join a growing AI-native fintech company as a hands-on security individual contributor. You will evolve its application security program and help protect AI agent workflows in a regulated banking environment, with room to grow into technical leadership.
What You'll Do
Build and mature application security tooling, processes, and secure SDLC practices that fit naturally into engineering workflows.
Partner with engineering to secure AI agent workflows, protect data privacy, and mitigate AI-specific vulnerabilities.
Automate security processes, including detection pipelines and vulnerability management, to reduce manual work.
Lead incident response and turn lessons from incidents into lasting improvements.
Support compliance and customer trust initiatives, including SOC 2, ISO 27001, and bank security requirements.
What We're Looking For
Four to eight years of application security experience, ideally in a fast-growing startup or company.
At least three years focused primarily on hands-on application or product security, such as secure code review, threat modeling, penetration testing, or security tooling.
Experience as an individual contributor whose work includes hands-on coding, rather than in a management role.
A bachelor's degree in a technical field and strong computer science fundamentals.
Experience with TypeScript, JavaScript, AWS or GCP, secure SDLC, threat modeling, IAM, and application security.
Familiarity with AI or LLM security and cloud security fundamentals.
Fintech or regulated B2B SaaS experience is helpful, as is ownership of SOC 2 or ISO 27001 compliance or building a security program from an early stage.
Compensation & Benefits
Base salary: $190,000 to $250,000 annually. Visa sponsorship is available.
Location
On-site in San Francisco, California, United States.