Security Engineer — AI-Driven FinTech Defense

Coinflow; United States; Remote; USD 89,000 - 112,000; Full time

Benefits offered by this job

Health & wellness benefits

401(k) savings plan

Flexible time off

Job summary

Coinflow, a US-based payment services provider, is hiring a Security Engineer to own the day-to-day SecOps posture and work with engineering to keep our SDLC secure. You’ll employ AI-native security tooling (Claude Security/Code) and lead internal pentesting across services, APIs, and infrastructure.

You’ll manage vulnerability lifecycles, implement secure-by-default patterns, and coordinate with compliance for PCI DSS, SOC 2, ISO 27001, and DORA. CTO reporting with equity potential.

Qualifications

• 4+ years in a security engineering, product security, or DevSecOps role in fintech/payments or regulated environments.
• Hands-on offensive security experience targeting web apps, APIs, cloud, and infrastructure.
• Proven skills across complex multi-cloud architectures.
• Production experience operating a SIEM and building useful dashboards.
• Fluency in TypeScript/Node; comfortable with Rust/Go/Python for code reading and tooling.
• Experience with vulnerability management at scale: CVE triage and automation.

Responsibilities

• Stand up and operate a SIEM; build a real-time SecOps dashboard for engineers and leadership.
• Conduct internal penetration testing across services, APIs, and infrastructure; document findings and drive remediation.
• Own vulnerability lifecycle end-to-end; triage, patching, and upgrade automation.
• Define secure-by-default patterns; integrate SAST/DAST/secret scanning into CI; speed up secure delivery.
• Collaborate with compliance to produce evidence and controls for PCI DSS, SOC 2, ISO 27001, DORA.
• Review and triage security issues, ensuring safe and reliable services for customers.

Skills

Offensive security

SIEM experience

TypeScript/Node

Cloud platforms

Vulnerability management

AI-native tooling

Tools

Datadog

Splunk

Elastic

Panther

Job description

Coinflow, a US-based payment services provider, is hiring a Security Engineer to own the day-to-day SecOps posture and work with engineering to keep our SDLC secure. You’ll employ AI-native security tooling (Claude Security/Code) and lead internal pentesting across services, APIs, and infrastructure.

You’ll manage vulnerability lifecycles, implement secure-by-default patterns, and coordinate with compliance for PCI DSS, SOC 2, ISO 27001, and DORA. CTO reporting with equity potential.