AI-Driven Security Engineer: Incident Response for FinTech

Onramp Bitcoin; Northern (KY); Hybrid; USD 150,000 - 210,000; Full time

Benefits offered by this job

High agency

Transparent culture

Equity on conversion

Job summary

Onramp Bitcoin is seeking a senior security engineer to lead our security roadmap in a remote-first setup across the US. You will own incident response, drive AI-native defense, and partner with engineering to harden pipelines and governance.

The role blends security and product engineering, with opportunities to shape SOC 2, identity, cloud posture, and supply chain controls while shipping code in TypeScript/Next.js and Elixir/Phoenix.

Qualifications

• Hands-on security engineering experience in fintech/custody/exchange is ideal.
• Experience running incident response end-to-end and writing post-incident reviews.
• Offensive security mindset with pen testing and AI-driven approaches.
• Software engineer with experience on modern stacks (React/Next.js and TypeScript, or Elixir/Phoenix, Node).
• Deep knowledge of identity, endpoint, and cloud security in Google Workspace, GitHub, GCP, and Vercel.

Responsibilities

• Own the security roadmap and incident response program for Onramp.
• Lead AI-driven offensive testing and integration with engineering.
• Harden CI/CD pipelines, cloud posture, secrets management, and IAM least-privilege.
• Govern the AI-native toolchain and shepherd risk reviews, SOC 2 evidence, and third-party vended controls.
• Ship security-oriented features in TypeScript/Next.js and Elixir/Phoenix services.

Skills

Security engineering

Incident response

Penetration testing

AI-native security

Runbooks writing

Cloud security

Tools

React/Next.js

Elixir/Phoenix

Node.js

GCP

GitHub

Vercel

Job description

Onramp Bitcoin is seeking a senior security engineer to lead our security roadmap in a remote-first setup across the US. You will own incident response, drive AI-native defense, and partner with engineering to harden pipelines and governance.

The role blends security and product engineering, with opportunities to shape SOC 2, identity, cloud posture, and supply chain controls while shipping code in TypeScript/Next.js and Elixir/Phoenix.