Fintech AppSec Engineer — Secure Payments & CI/CD

SpaceX Super Intelligence; Palo Alto (CA); On-site; USD 100,000 - 258,000; Full time

Job summary

SpaceXSI is seeking an Application Security Engineer to protect payments and financial products across the software development lifecycle, with a focus on code security and CI/CD pipelines.

You will conduct code reviews, design secure coding guidelines, model threats, and oversee vulnerability management, bug bounty programs, incident response, SBOMs, and agentic/LLM-based security solutions for high-value transactions. Excellent communication is essential.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, or a related field.
• 3-5 years of application security experience focused on code security
• Experience in payments, digital wallets, or financial platforms
• Strong secure coding practices and knowledge of OWASP Top 10
• Proficiency in Python or Rust
• Experience securing CI/CD pipelines and DevSecOps
• Familiarity with SBOM generation and software supply chain security
• Experience with Burp Suite or OWASP ZAP
• Excellent communication skills

Responsibilities

• Conduct in-depth code reviews and static analysis to identify vulnerabilities in financial applications
• Design and implement secure coding guidelines and best practices for development teams
• Collaborate with development teams to integrate security in the CI/CD pipeline
• Perform threat modeling and risk assessments for payments, wallets, ledgers, and related product surfaces
• Manage vulnerability tracking and remediation guidance
• Manage the bug bounty program, including intake, triage, researcher communication, and coordinated disclosure
• Support incident response activities related to application security
• Stay current on emerging threats against financial and cloud-native systems
• Evaluate and secure SBOMs and software supply chains
• Design and implement agentic and LLM-based security solutions

Skills

Application security

Code security

CI/CD security

DevSecOps

Python

Rust

SBOM

Threat modeling

Vulnerability management

Bug bounty

Security communications

Education

Bachelor's degree in Computer Science, Cybersecurity, or a related field

Tools

Burp Suite

OWASP ZAP

SBOM tools

GitOps

Job description

SpaceXSI is seeking an Application Security Engineer to protect payments and financial products across the software development lifecycle, with a focus on code security and CI/CD pipelines.

You will conduct code reviews, design secure coding guidelines, model threats, and oversee vulnerability management, bug bounty programs, incident response, SBOMs, and agentic/LLM-based security solutions for high-value transactions. Excellent communication is essential.