Security engineer in fintech

Pliant; United States; Remote; USD 150,000 - 210,000; Full time

Benefits offered by this job

Гибкий график

Возможность удалённой работы

Конкурентная заработная плата

Job summary

Pliant ищет практичного специалиста по безопасности (hands-on) с глубоким опытом DevSecOps, AWS и автоматизации. Ваша роль — интегрировать безопасность в SDLC, управлять инфраструктурой и инструментами, укреплять образцы и развивать безопасные платформы для клиентов.

Кандидат будет работать с командами DevOps и разработки, внедрять стандарты и проводить threat modeling, чтобы снизить риски и ускорить доставку. Возможна удалённая работа и гибкий график.

Qualifications

• Опыт работы в технической роли в области безопасности не менее 5 лет.
• Сильная осведомлённость в AWS security (IAM, KMS, CloudTrail, S3, GuardDuty и пр.).
• Понимание DevSecOps и интеграции безопасности в CI/CD.
• Опыт Terraform и IaC, способность писать модули и внедрять guardrails.
• Опыт скриптинга: Python, Bash, TypeScript; автоматизация.
• Опыт securing контейнеров (Docker, ECS, EKS, Kubernetes) и образов.
• Глубокое понимание OWASP Top 10, безопасной разработки и рисков цепочек поставок ПО.
• Опыт работы с облачными платформами безопасности (Wiz, Orca, Lacework, Prisma Cloud).
• Знания по управлению уязвимостями и процессам remediation.
• Опыт в практике application security: анализ кода, threat modeling, SAST/DAST.

Responsibilities

• Внедрять лучшие практики безопасности на всем жизненном цикле разработки для защиты продуктов, инфраструктуры и данных клиентов.
• Разрабатывать и поддерживать инструменты безопасности и автоматизации на масштаб.
• Встраивать меры защиты в DevEx и инфраструктурные платформы.
• Определять и продвигать безопасные стандарты разработки и модули Terraform/Docker.
• Укреплять защищённые образы, управление доступом и сигнатуры образов; реализовывать контроль доступа и обнаружение отклонений.
• Развертывать и управлять платформами безопасности в облаке (Wiz и аналоги) и ускорять remediation.
• Собрать аудит-готовые доказательства по PCI DSS, ISO 27001, SOC 2, DORA.
• Поддерживать управление уязвимостями, инцидент-response и пост-мортем-аналитику.

Job description

Описание

Pliant is a modular B2B payments platform that combines commercial card issuing, payment accounts, FX, and spend management in one system — adapting to existing setups rather than requiring customers to replace them. We’re looking for a hands‑on Security Engineer (m/f/d) with deep expertise in DevSecOps, cloud security (AWS), and automation to join our growing security team at Pliant.

Задачи

• Integrate security best practices throughout the SDLC to protect products, infrastructure, and customer data.
• Design, implement, and maintain security automation tooling to address problems at scale (e.g., patch management, vulnerability management, compliance evidence collection).
• Embed security controls and guardrails into the developer platform to enable secure and efficient delivery.
• Define and promote “Paved Roads” - reusable, secure development standards and Terraform/Docker modules.
• Harden containerized workloads (ECS and EKS) - ensure clusters follow security best practices for isolation, networking, and access control; Maintain secure, up-to-date base images; enforce image signing and provenance; implement admission control, least‑privilege IAM roles, and runtime anomaly detection.
• Deploy and manage cloud security platforms (e.g., Wiz) and drive remediation workflows.
• Automate collection of audit‑ready evidence for frameworks like PCI DSS, ISO 27001, SOC 2, and DORA.
• Support vulnerability management (triage, SLAs, RCA) and lead incident response and post‑mortems.
• Conduct threat modeling, architecture reviews, and provide guidance on secure design and cryptography.
• Build and maintain security documentation, internal tooling, and feedback loops to strengthen security culture.
• Act as a security SME across application, cloud, and compliance domains.

Требования

• 5+ years of experience in a technical security role, preferably in a cloud-native or fintech/SaaS environment.
• Strong proficiency with AWS services and security (IAM, KMS, CloudTrail, S3, GuardDuty, SCPs, etc.).
• Solid understanding of DevSecOps practices and integrating security into CI/CD workflows.
• Proficient in Terraform and other IaC tooling, capable of writing secure, reusable modules and enforcing guardrails.
• Proficient in Python, Bash, or TypeScript – capable of scripting and building automation tools.
• Experience securing containers (Docker, ECS, EKS, or Kubernetes) and implementing hardened images.
• Expert level understanding of OWASP Top 10, secure coding, and software supply chain risks.
• Experience managing and integrating cloud security platforms (e.g., Wiz, Orca, Lacework, Prisma Cloud).
• Understanding of vulnerability management and remediation workflows at scale.
• Experience with application security practices, including code review, threat modeling, static and dynamic analysis (SAST, DAST), and attack surface analysis.
• Experience performing Application Penetration Testing or Vulnerability Research / Bug Bounty Hunting.
• (Ability to discover and identify fixes for SQLi, XSS, CSRF, SSRF, authentication and authorization flaws, and other web-based security vulnerabilities)
• Experience with threat modeling or security reviews.
• Excellent communication skills and empathy, security is a complex topic that you have to be able to explain to audiences of various levels of previous exposure or learning.
• A builder’s mindset: you enjoy solving real-world security problems with automation.
• A pragmatic approach to security: focused on reducing risk while enabling delivery.
• Willingness to dive into unknowns, collaborate across teams, and take ownership.
• Passion for clean, maintainable, and reusable code - even for security tools.
• Будет плюсом: Exposure to compliance frameworks (PCI DSS, ISO 27001, SOC 2); Familiarity with detection engineering or lightweight SIEM tooling; Contributions to open-source security tools or internal security automation frameworks

Условия

• The opportunity to work in a growing team with big responsibilities that thrives on a strong exchange of knowledge and excellence
• Attractive remuneration
• Your choice of preferred OS, Windows or Mac
• Flat hierarchy and transparent communication in a relaxed, professional atmosphere
• Opportunity to develop your talent in a dynamic team with ambitious goals
• Flexibility and possibility to work remotely
• Company card with a monthly allowance for lunches, coffee, etc. with co-workers