Quick overview
Job description
About the Role
Join a growing AI-native fintech company as a hands-on senior individual contributor, owning and advancing its application security program. You will help secure AI agent workflows in a regulated financial environment while building practices that scale with the engineering team.
What You'll Do
Build and mature security tooling, processes, and secure SDLC practices that fit naturally into engineering workflows.
Partner with engineering to secure AI agent execution and workflows, protect data privacy, and mitigate AI-specific vulnerabilities.
Automate security processes by building detection pipelines, improving vulnerability management, and reducing manual work.
Lead incident response and turn lessons from incidents into lasting security improvements.
Contribute to SOC 2, ISO 27001, and financial institution security requirements.
What We're Looking For
Four to eight years of application security experience, including hands-on product security work in a rapidly growing company.
Recent experience at a venture-backed startup or hypergrowth company, with application security as your primary focus.
Practical experience with secure code review, threat modeling, penetration testing, or building security tools used by engineers.
Currently working as an individual contributor, with hands-on technical work as your primary responsibility.
A bachelor's degree in a technical field and a strong foundation in cloud security.
Experience with TypeScript, JavaScript, AWS or GCP, DevSecOps, secure SDLC, IAM, and application security.
Familiarity with AI and LLM security, fintech or other regulated B2B SaaS, and SOC 2 or ISO 27001 is valuable.
Compensation & Benefits
Base salary range: $190,000 to $250,000 annually. Visa sponsorship is available.
Location
On-site in San Francisco, California.