FinTech App Security Engineer (Code & CI/CD)

SpaceX Super Intelligence; New York (NY); On-site; USD 100,000 - 258,000; Full time

Benefits offered by this job

Equity

Medical, Vision & Dental

401(k) retirement plan

Disability & Life insurance

Employee discounts

Job summary

SpaceXSI, SpaceX's Super Intelligence division, seeks an Application Security Engineer to protect payments and wallets across the SDLC, focusing on code security and secure CI/CD pipelines for high-value financial systems.

You will collaborate with engineering teams, perform threat modeling, manage the bug bounty program, and help build agentic and LLM-based security solutions to detect and prevent fraud across cloud-native environments.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, or a related field.
• 3–5 years of experience in application security with a focus on code security.
• Experience in payments, money transmission, digital wallets, or related platforms.
• Deep understanding of secure coding practices and OWASP Top 10.
• Proficiency in Python or Rust and secure coding practices in these languages.
• Experience securing CI/CD pipelines and DevSecOps practices.
• Familiarity with SBOM generation tools and software supply chain security.
• Experience with Burp Suite and OWASP ZAP and static/dynamic analysis.
• Experience securing high-value transaction systems and fraud controls.
• Experience designing agentic/LLM-based security solutions.
• Excellent communication skills.

Responsibilities

• Conduct in-depth code reviews and static analysis to mitigate vulnerabilities in financial applications.
• Design and implement secure coding guidelines for development teams.
• Collaborate with development teams to integrate security in the CI/CD pipeline.
• Perform threat modeling and risk assessments for payments, wallets, ledgers, and related surfaces.
• Manage vulnerability tracking and remediation guidance for engineering teams.
• Oversee the bug bounty program, including intake, triage, researcher communication, and disclosure.
• Support incident response activities related to application security.
• Stay current on emerging threats against financial and cloud-native systems.
• Evaluate and secure software supply chains, including SBOMs.
• Design and implement agentic and LLM-based security solutions.

Skills

Application security

Code security

CI/CD security

DevSecOps

Python

Rust

SBOM generation

Threat modeling

Vulnerability management

LLM-based security

Education

Bachelors degree in Computer Science or Cybersecurity

Tools

Burp Suite

OWASP ZAP

SBOM tooling

CI/CD tooling

AWS security tooling

Job description

SpaceXSI, SpaceX's Super Intelligence division, seeks an Application Security Engineer to protect payments and wallets across the SDLC, focusing on code security and secure CI/CD pipelines for high-value financial systems.

You will collaborate with engineering teams, perform threat modeling, manage the bug bounty program, and help build agentic and LLM-based security solutions to detect and prevent fraud across cloud-native environments.