Information Security Engineer

mxtechnologiesinc; Lehi (UT); On-site; USD 140,000 - 230,000; Full time

Job summary

MX is seeking a Senior Security Engineer to join the Security Engineering team. You will drive secure coding practices, threat modeling, incident response, and risk management across MX’s software and cloud infrastructure.

You will collaborate with development, operations, and governance teams to implement controls, automate security tasks, and mentor peers. This role emphasizes leadership in a fast-moving fintech environment.

Qualifications

• Bachelor's degree or equivalent in CS/Info Security or related field.
• 8+ years with Bachelor's, 6+ with Master's, or 3+ with PhD in security.
• Experience in application and/or infrastructure security, including networks/servers/cloud.
• Experience performing threat modeling and risk assessments to prioritize work.
• Experience supporting SOC 2/PCI compliance.

Responsibilities

• Own and execute application security initiatives across the development lifecycle.
• Design security controls for networks, servers, and cloud environments to protect data.
• Lead threat modeling and risk assessments to prioritize security investments.
• Develop and execute incident response plans, including detection, containment and recovery.
• Provide expertise on regulations and standards (SOC 2, PCI) for audit-ready controls.
• Build and maintain security tooling and automation within dev/ops workflows.
• Partner with development/ops teams to deliver security solutions.
• Educate employees on security best practices and emerging threats.
• Track security outcomes and translate into business impact.
• Mentor engineers and coordinate team activities as a team lead.

Skills

Application security

Infrastructure security

Threat modeling

Incident response

Security automation

Education

Bachelor's degree in CS / Info Security

Master's degree

PhD

Job description

MX is a financial technology company on a mission to empower the world to be financially strong. We build the data infrastructure and intelligent solutions that help leading banks, credit unions, and fintechs deliver smarter, more personalized financial experiences to millions of consumers every day.

Operating at the intersection of scale and agility, MX combines the momentum of a market-proven platform with the speed, innovation, and ownership of a growth-stage company. Here, thoughtful execution matters, innovation is expected, and team members have a direct seat at the table to influence products and outcomes.

Our culture is built on curiosity, accountability, and measurable impact. We give people the autonomy to question assumptions, build better systems, and shape how we scale. If you're driven to tackle complex technical and business challenges alongside a collaborative team that builds with sane, high-trust execution, you'll thrive at MX.

Introduction to the Position

The Security Engineering team is responsible for designing and implementing the security measures that protect MX's digital assets and infrastructure. The team partners closely with development and operations teams to embed secure coding practices, identify vulnerabilities across the software lifecycle, and keep sensitive information confidential and intact. Its work spans application security, infrastructure and cloud security, threat modeling, incident response, compliance, and security automation.

This role exists to bring senior, hands-on security expertise to complex problems where the right approach is not yet defined. As a Senior Security Engineer, you will determine methods and procedures for new security initiatives, resolve complex issues that require in-depth evaluation, and may coordinate the work of other engineers as a team lead. You will be a go-to expert within the company, someone that peers and senior leaders rely on for advice and for key security decisions.

Your impact on MX will be measurable: faster vulnerability remediation, stronger incident response, reduced risk across our applications and infrastructure, and a clearer path to meeting industry regulations and standards such as SOC 2 and PCI, as well as contractual security requirements.

Job Responsibilities

• Own and execute application security initiatives, including identifying vulnerabilities and promoting secure coding practices throughout the development lifecycle, to reduce risk in MX software.
• Design and implement security controls for networks, servers, and cloud environments to protect against unauthorized access and data breaches.
• Lead threat modeling and risk assessments of the organization's assets, and use the results to prioritize security investments.
• Develop and execute incident response plans, including detection, containment, and recovery, and drive complex incidents through resolution.
• Provide technical expertise on regulations, standards (e.g., SOC 2, PCI), and contractual requirements, and partner with compliance and governance stakeholders to deliver audit-ready controls.
• Build and maintain security tooling and automation integrated into development and operational workflows to strengthen security and streamline processes.
• Partner with development and operations teams, and network with key contacts outside the security function, to deliver security solutions that fit how those teams work.
• Promote a culture of security by educating employees on security best practices and emerging threats, with a focus on secure code training.
• Track and improve security outcomes, such as vulnerability remediation time, incident response times, patch coverage, and the effectiveness of security controls, and translate them into business impact.
• Mentor other security engineers and coordinate team activities on new assignments as a team lead.

Basic Qualifications (Must-Have)

• Bachelor's degree in Computer Science, Information Security, or a related field (or equivalent practical experience).
• 8+ years of related security engineering experience with a Bachelor's degree; or 6+ years with a Master's degree; or 3+ years with a PhD; or equivalent experience.
• Demonstrated experience in application security and/or infrastructure security, including securing networks, servers, or cloud environments.
• Demonstrated experience performing threat modeling and risk assessments and using the results to prioritize security work.
• Experience supporting compliance with industry standards such as SOC 2 or PCI.

Preferred Qualifications

• Master's degree or PhD in Computer Science, Information Security, or a related field.
• Experience leading or coordinating security incident response from detection through recovery.
• Experience integrating security tools and automation into development and operational workflows.
• Experience designing or delivering secure code training or other security awareness programs.
• Experience in a regulated, fintech, or SaaS environment, an