Senior Security Engineer

Team: Core Engineering

Location: San Francisco

Commitment: Full-time

Workplace Type: onsite

About Finix

You Will:

• Partner with Engineering on secure design and implementation of new features
• Secure our AWS infrastructure and workstations, and lead security incident response
• Coordinate pentests, vulnerability scanning, and the bug bounty program: triage findings, lead fixes, and drive remediation with engineering
• Secure our CI/CD pipelines and software supply chain
• Own PCI architecture with engineering, including scoping, data handling, and secure SDLC
• Support HSM operations, key exchanges, and key injections
• Build and maintain controls for PCI DSS, SOC 2, and other regulations
• Support audit fieldwork and customer security questionnaires
• Secure internal AI tooling and set guardrails for AI use across the company

You Have:

• 5+ years in security engineering, preferably in cloud-native fintech or payments
• Development experience in Java
• Strong AWS experience, including security services and infrastructure
• Hands-on vulnerability remediation experience
• Incident response experience
• Clear written and verbal communication, including presenting findings and recommendations to technical and non-technical audiences
• Working knowledge of PCI DSS and other regulatory frameworks
• Cryptography and key management experience

Nice to Have:

• AWS Security Specialty, CISSP, or similar certification
• Bug bounty and hands-on pentest experience
• CI/CD pipeline experience
• Infrastructure as code experience (Terraform)
• Experience with IAM and identity providers such as Okta
• Experience with CrowdStrike, Palo Alto Prisma Access, or Sonatype Nexus