FinTech Application Security Engineer (Code & CI/CD)

SpaceXSI; Palo Alto (CA); On-site; USD 100,000 - 258,000; Full time

Benefits offered by this job

Equity

Medical insurance

Vision insurance

Dental insurance

401(k) retirement plan

Disability insurance

Life insurance

Discounts and perks

Job summary

SpaceXSI is seeking an Application Security Engineer to protect the security of our payments and financial products across the software development lifecycle. You will focus on code security, CI/CD pipelines, and systems that move customer funds, collaborating with development teams to embed secure practices throughout the stack.

Ideal candidates bring hands-on experience securing fintech platforms, strong knowledge of OWASP Top 10, and proficiency in Python or Rust.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, or a related field.
• 3-5 years of experience in application security, with a strong focus on code security practices.
• Experience in payments, money transmission, digital wallets, or related financial platforms
• Deep understanding of secure coding practices, application security frameworks, and common vulnerabilities (e.g., OWASP Top 10)
• Proficiency in Python or Rust and experience with secure coding practices in these languages
• Experience securing CI/CD pipelines and implementing DevSecOps practices
• Familiarity with software supply chain security and SBOM generation tools
• Experience with security testing tools (e.g., Burp Suite, OWASP ZAP) and static/dynamic code analysis
• Experience securing payments, wallets, ledgers, or other high-value transaction systems, including controls against fraud, abuse, and integrity issues
• Experience designing and implementing agentic and LLM-based solutions for security problems
• Excellent communication skills, able to explain complex security issues to both technical and non-technical audiences

Responsibilities

• Conduct in-depth code reviews and static analysis to identify and mitigate security vulnerabilities in financial applications
• Design and implement secure coding guidelines and best practices for development teams
• Collaborate closely with development teams to integrate security practices throughout the CI/CD pipeline
• Perform threat modeling and risk assessments for payments, wallets, ledgers, and related product surfaces, and develop mitigation strategies for fraud, abuse, and unauthorized movement of funds or credits
• Manage vulnerability tracking and remediation efforts, providing guidance to development teams
• Manage the bug bounty program, including intake, triage, researcher communication, and coordinated disclosure
• Support incident response activities related to application security
• Stay current on emerging threats against financial and cloud-native systems, and continuously strengthen our controls
• Evaluate and secure software supply chains, including producing and maintaining Software Bills of Materials (SBOMs)
• Design and implement agentic and LLM-based solutions that help detect, investigate, or prevent security problems

Skills

Code security

Python

Rust

CI/CD security

DevSecOps

SBOM

OWASP Top 10

Burp Suite

OWASP ZAP

Payments security

LLM security

Agentic security

Education

Bachelor's degree in CS or related

Tools

Burp Suite

OWASP ZAP

Terraform

AWS

Job description

SpaceXSI is seeking an Application Security Engineer to protect the security of our payments and financial products across the software development lifecycle. You will focus on code security, CI/CD pipelines, and systems that move customer funds, collaborating with development teams to embed secure practices throughout the stack.

Ideal candidates bring hands-on experience securing fintech platforms, strong knowledge of OWASP Top 10, and proficiency in Python or Rust.