Quick overview
Job description
About the Role
Join a growing AI-focused fintech team to own and evolve its application security program. You will do hands-on security engineering while helping shape how the organization secures AI agent workflows in a regulated banking environment.
What You'll Do
Build and mature security tooling, processes, and secure SDLC practices that fit naturally into engineering workflows.
Partner with engineering teams to secure AI agent execution and agentic workflows, protect data privacy, and address AI-specific vulnerabilities.
Automate security processes, including detection pipelines and vulnerability management.
Lead incident response and turn incidents into lasting security improvements.
Support customer trust and compliance efforts, including SOC 2, ISO 27001, and bank security requirements.
What We're Looking For
Four to eight years of hands-on application security experience in a rapidly growing organization.
Strong experience reviewing code, identifying and fixing vulnerabilities, penetration testing, and implementing secure coding practices.
Currently an individual contributor focused on hands-on security engineering, with a technical bachelor's degree.
Application security expertise, rather than a primary focus on IT, GRC, network security, or security operations.
Experience with TypeScript or JavaScript, AWS or GCP, secure SDLC, threat modeling, IAM, and cloud security fundamentals.
Fintech or regulated B2B SaaS experience is useful, as is experience owning SOC 2 Type II or ISO 27001 compliance or building a startup security program.
Interest in AI and LLM security is valuable.
Compensation & Benefits
Base salary: $190,000 to $250,000 annually. Visa sponsorship is available.
Location
On-site in San Francisco, California.
Haystack's AI agent can fill in and submit this application for you. How AI auto apply works