EngineerJobs.io
← Back to all jobs

Job Description

Finix Payments is hiring a Senior Security Engineer in San Francisco to design, implement, and operate security across cloud and corporate environments.

Responsibilities

  • Collaborate with Engineering to design and deliver new features with secure-by-default approaches
  • Secure AWS infrastructure and workstations; lead and execute security incident response
  • Coordinate security testing activities including pentests and vulnerability scanning, plus manage the bug bounty program
  • Triaging findings, leading fixes, and driving remediation in partnership with engineering teams
  • Secure CI/CD pipelines and strengthen the software supply chain
  • Own PCI architecture with engineering, including scoping, data handling, and a secure SDLC
  • Support HSM operations, key exchanges, and key injections
  • Build and maintain security controls for PCI DSS, SOC 2, and other applicable regulations
  • Support audit fieldwork and complete customer security questionnaires
  • Secure internal AI tooling and define guardrails for AI use across the company

Requirements

  • 5+ years of security engineering experience, preferably in cloud-native fintech or payments
  • Java development experience
  • Strong AWS experience, including security services and infrastructure
  • Hands-on experience with vulnerability remediation
  • Incident response experience
  • Clear written and verbal communication, including presenting security findings and recommendations to both technical and non-technical audiences
  • Working knowledge of PCI DSS and other regulatory frameworks
  • Cryptography and key management experience

Technologies

  • AWS
  • Java
  • AWS Security Specialty
  • PCI DSS
  • SOC 2
  • HSM
  • CI/CD

Nice to Have

  • AWS Security Specialty, CISSP, or similar certification
  • Bug bounty and hands-on pentest experience
  • CI/CD pipeline experience
  • Infrastructure as code experience (Terraform)
  • Experience with IAM and identity providers such as Okta
  • Experience with CrowdStrike, Palo Alto Prisma Access, or Sonatype Nexus

Role: Security Engineer (IC4–IC5)

Location: San Francisco, CA (onsite)

Compensation Range: USD 180,000 - 240,000 per year + Equity + Benefits

Similar Jobs