Staff Security Engineer
Core
Embed security into architecture and processes for product and software engineering teams across design, build, and ship phases.
Role type
Staff Security Engineer (Application, Cloud, and Automation)
Builds
Secure web/mobile applications, AWS cloud infrastructure, security automation tooling, and CI/CD security checks.
Domain
Fintech / Financial Services
Required skills
Application security, Cloud security, Security automation and tooling, Threat modeling, Python, AWS IAM, Network segmentation, Container security, CI/CD integration, Vulnerability management
Preferred skills
Infrastructure as Code (Terraform), Red teaming, PCI-regulated environment experience, Mobile app security, AI/ML security, Identity security, Ruby on Rails, Go
Technologies
Python, AWS, Terraform, SAST, SCA, DAST, SIEM, CNAPP, WAF, Ruby on Rails, Go
Responsibilities
Partner with Engineering and DevOps to provide security input at any project phase; Guide secure design and code review for web/mobile apps; Manage core AppSec tooling (SAST, SCA, secret scanning, DAST); Triage and remediate application vulnerabilities; Contribute to cloud security posture (IAM, networking, containers); Build automation and internal tooling; Contribute to security log pipelines and endpoint controls; Embed security checks into CI/CD pipelines; Develop secure development standards and playbooks.
Seniority
Staff, high-impact IC with cross-domain influence
