Fintech Application Security Engineer – Code & CI/CD

Maxxd; New York (NY); On-site; USD 100,000 - 258,000; Full time

Benefits offered by this job

Equity

Medical, Vision & Dental

401(k)

Disability insurance

Life insurance

Job summary

SpaceXAI is seeking an Application Security Engineer to protect the security and integrity of payments and financial products across the software development lifecycle. You will oversee code security, secure CI/CD practices, and SBOM‑driven supply chain controls while collaborating with development teams on secure design.

The role requires hands‑on security work, threat modeling, and incident response support, with experience in fintech platforms and cloud‑native environments.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, or a related field.
• 3–5 years of experience in application security, with a strong focus on code security practices.
• Experience in payments, money transmission, digital wallets, or related financial platforms.
• Deep understanding of secure coding practices, frameworks, and common vulnerabilities (e.g., OWASP Top 10).
• Proficiency in Python or Rust and secure coding practices in these languages.
• Experience securing CI/CD pipelines and implementing DevSecOps practices.
• Familiarity with software supply chain security and SBOM generation tools.
• Experience with security testing tools (Burp Suite, OWASP ZAP) and static/dynamic code analysis.
• Experience securing payments, wallets, ledgers, or high‑value transaction systems.
• Experience designing agentic and LLM‑based security solutions.
• Excellent communication skills to explain complex security to diverse audiences.

Responsibilities

• Conduct in‑depth code reviews and static analysis to identify vulnerabilities in financial applications
• Design and implement secure coding guidelines and best practices for development teams
• Collaborate with development teams to integrate security throughout the CI/CD pipeline
• Perform threat modeling and risk assessments for payments, wallets, ledgers, and related surfaces
• Manage vulnerability tracking and remediation guidance for development teams
• Manage the bug bounty program, including intake, triage, researcher communication, and disclosure
• Support incident response activities related to application security
• Stay current on emerging threats against financial and cloud‑native systems and strengthen controls
• Evaluate and secure software supply chains, including SBOMs
• Design and implement agentic and LLM‑based security solutions

Skills

Code security

OWASP Top 10

Python

Rust

CI/CD pipelines

DevSecOps

SBOM

Threat modeling

Security testing tools

Vulnerability management

Education

Bachelor’s degree in Computer Science, Cybersecurity, or a related field

Tools

Burp Suite

OWASP ZAP

SBOM tools

GitOps

Job description

SpaceXAI is seeking an Application Security Engineer to protect the security and integrity of payments and financial products across the software development lifecycle. You will oversee code security, secure CI/CD practices, and SBOM‑driven supply chain controls while collaborating with development teams on secure design.

The role requires hands‑on security work, threat modeling, and incident response support, with experience in fintech platforms and cloud‑native environments.