Senior Security Engineer
Senior
Application Security
Aws Cloud Security
Cloud Platforms
Cloud Security
Cybersecurity Operations
Data Security
Facilities Management
Incident Management
Incident Response
Information Security
InfoSec
Pci
Risk Management
Security
Security Automation
Security Compliance
Security Operations
Security Standards
Security Testing
Software Security
Job Description
Finix Payments is hiring a Senior Security Engineer in San Francisco to design, implement, and operate security across cloud and corporate environments.
Responsibilities
- Collaborate with Engineering to design and deliver new features with secure-by-default approaches
- Secure AWS infrastructure and workstations; lead and execute security incident response
- Coordinate security testing activities including pentests and vulnerability scanning, plus manage the bug bounty program
- Triaging findings, leading fixes, and driving remediation in partnership with engineering teams
- Secure CI/CD pipelines and strengthen the software supply chain
- Own PCI architecture with engineering, including scoping, data handling, and a secure SDLC
- Support HSM operations, key exchanges, and key injections
- Build and maintain security controls for PCI DSS, SOC 2, and other applicable regulations
- Support audit fieldwork and complete customer security questionnaires
- Secure internal AI tooling and define guardrails for AI use across the company
Requirements
- 5+ years of security engineering experience, preferably in cloud-native fintech or payments
- Java development experience
- Strong AWS experience, including security services and infrastructure
- Hands-on experience with vulnerability remediation
- Incident response experience
- Clear written and verbal communication, including presenting security findings and recommendations to both technical and non-technical audiences
- Working knowledge of PCI DSS and other regulatory frameworks
- Cryptography and key management experience
Technologies
- AWS
- Java
- AWS Security Specialty
- PCI DSS
- SOC 2
- HSM
- CI/CD
Nice to Have
- AWS Security Specialty, CISSP, or similar certification
- Bug bounty and hands-on pentest experience
- CI/CD pipeline experience
- Infrastructure as code experience (Terraform)
- Experience with IAM and identity providers such as Okta
- Experience with CrowdStrike, Palo Alto Prisma Access, or Sonatype Nexus
Role: Security Engineer (IC4–IC5)
Location: San Francisco, CA (onsite)
Compensation Range: USD 180,000 - 240,000 per year + Equity + Benefits
Similar Jobs
S