Assistant Vice President – Cyber Security

Continental Finance Company; Wilmington (DE); On-site; USD 120,000 - 150,000; Full time

Benefits offered by this job

Competitive compensation

Benefits package

Fast-paced business casual environment

Hybrid work schedule

Job summary

Continental Finance Company in Wilmington, Delaware, is seeking a Lead Cyber Security Engineer to support the Technology team. This role involves designing and operating cybersecurity programs in a cloud-first environment, focusing on embedding security in AWS infrastructures.

The ideal candidate will balance risk management with engineering demands and provide leadership to a cybersecurity team. The position offers a hybrid work schedule, competitive compensation, and growth opportunities.

Qualifications

• Minimum of 6–10 years of experience in cybersecurity or software engineering.
• 2–4 years in a senior or lead security engineering role.
• Hands-on experience securing cloud-native platforms.

Responsibilities

• Own the technical execution of the cybersecurity program.
• Provide leadership to a team of cybersecurity engineers.
• Integrate security tooling into CI/CD pipelines.

Skills

AWS IAM

Security Hub

DevSecOps practices

OAuth2

Terraform

Vulnerability assessments

Incident response

Risk management

Education

BA or BS Degree in Computer Science or related degree

Tools

AWS CloudTrail

API Security

Job description

Come join a growing financial technology company that’s leading the marketplace in both the marketing and servicing of credit cards! Continental Finance Company specializes in credit card options for those consumers with less than perfect credit. We are seeking a Lead Cyber Security Engineer to support our Technology team.

The Lead Cyber Security Engineer will be responsible for designing, implementing, and operating our cybersecurity program in a cloud-first, API-driven environment. This role is a senior individual contributor with technical leadership responsibility, responsible for embedding security into our AWS infrastructure, applications, and engineering workflows.

The ideal candidate is a builder and operator who can balance practical risk management with engineering velocity, working closely with development and infrastructure teams to deliver secure, scalable systems.

Essential Functions

• Own the technical execution of the cybersecurity program.
• Provide leadership to a team of cybersecurity engineers, including performance coaching, workload prioritization, and professional development.
• Design and operate security controls across AWS environments.
• Implement and maintain IAM, encryption, secrets management, and network security.
• Define and enforce secure API and application security standards.
• Integrate security tooling into CI/CD pipelines (SAST, DAST, dependency scanning).
• Perform threat modeling, vulnerability assessments, and remediation.
• Monitor security events and lead technical incident response.
• Support SOC 2, PCI DSS, and related audit and compliance activities.
• Conduct security reviews of vendors, partners, and third-party integrations.
• Act as a security subject-matter expert and advisor to engineering teams.

The ideal candidate will have the following

• BA or BS Degree in Computer Science or related degree is preferred. High School Diploma or GED required.
• Minimum of 6–10 years of experience in cybersecurity, cloud infrastructure, or software engineering is required.
• 2–4 years in a senior or lead security engineering role.
• Hands‑on experience securing cloud‑native, SaaS or FinTech platforms.
• Direct experience with AWS-based, API‑heavy architectures.
• Strong hands‑on experience with:
  • AWS IAM, VPC, KMS, Security Hub, GuardDuty, CloudTrail
  • Secure API design (OAuth2, JWTs, mTLS)
  • Infrastructure-as-Code (Terraform or CloudFormation)
  • CI/CD security and DevSecOps practices
• Solid understanding of OWASP Top 10 and API Security Top 10.
• Strong technical judgment and ownership mindset.
• Ability to communicate security risks clearly to engineers and leadership.
• Pragmatic, risk‑based approach to security.
• Comfortably operating independently and remaining deeply hands‑on.
• AWS Certified Security – Specialty certification is a plus.
• CISSP, CCSP, CISM, or GIAC certifications are preferred.
• Experience in regulated FinTech or financial services environments preferred.

Why Continental Finance

Continental Finance Company (the “CFC”) is one of America’s leading marketers and servicers of credit cards for consumers with less‑than‑perfect credit. Since our founding in 2005, we have prided ourselves on corporate responsibility to customers in terms of a strong customer support program and fair treatment. With our success, we have also grown into an innovative financial tech company! With a state‑of‑the‑art consumer marketing and servicing platform, we provide a variety of services to consumers when other financial institutions will not accommodate them. With more than 2.6 million credit cards managed and serviced since our founding, we pride ourselves on putting the customer first. We are not a chartered banking financial institution, nor are we a debt originator or a credit card issuer.

CFC is an equal opportunity employer that is committed to inclusion and diversity. Our company provides equal employment opportunity (EEO) regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, or veteran status.

CFC is seeking bright, energetic individuals that will help us grow and develop together! We uphold a promise to treat our employees with the same care and concern as we do our customers. We offer all employees competitive compensation and benefits in an exciting, fast‑paced business casual environment. Join our growing team and apply online today!

CFC offers a hybrid work schedule which includes three (3) core days in the office (Tuesday, Wednesday, and Thursday) and two (2) remote workdays (Monday and Friday)

#LI-HYBRID