Security Software Engineer

HIFI; New York (NY); Sur place; USD 150 000 - 230 000; Plein temps

Résumé du poste

HIFI in New York is seeking a Security Engineer to own and build the company’s security program for its stablecoin infrastructure. You will shape IAM, endpoint security, cloud and network controls, and drive audits and partner reviews.

This hands-on role requires deep AWS and network security expertise, Terraform-based infrastructure, and a track record building security practices in fast-paced startups; you will collaborate across engineering, product, compliance, and leadership.

Qualifications

• 6+ years of security engineering experience.
• Hands-on AWS and network security with Terraform-managed infra.
• Experience owning security controls in regulated environments (payments/fintech).
• Strong web app and API security skills, including modern auth.
• Experience writing audit-ready security policies and procedures.
• Proven ability to build security practices from the ground up in a startup.

Responsabilités

• Own the security program from the ground up, including IAM, endpoint security, cloud and network controls.
• Lead threat modeling, hardening, monitoring, incident response, and secrets management.

Connaissances

Security engineering

AWS security

Terraform

Regulated environment experience

Web application security

API security

Audit-ready policies

SIEM

PostgreSQL security

Startup mindset

Outils

Terraform

Description du poste

HIFI is a stablecoin infrastructure company building technology for the next-generation of financial products. We build tools for payments and tokenized money products across money movement, cards, and capital markets. Institutions and enterprises already use our platform and APIs to move billions of dollars in production environments around the world, and we are still early.

Founded in 2022, our organization is flat and our team is talent dense. We work in person at our office in Flatiron and are intentional about who we work with. We've raised $37 million from world-class investors, including a Series A led by Left Lane Capital.

About the Team

HIFI's engineering team builds the payments infrastructure that fintechs and financial institutions use to move money on stablecoin rails. The team owns the APIs, ledger, and on-chain systems behind every payment HIFI processes, and works closely with product and compliance to make sure that infrastructure is reliable, secure, and ready for regulated use. As HIFI's volume grows and more institutions build on our platform, this team will decide how stablecoin payments hold up at the scale and standard that traditional financial infrastructure is held to.

As a Security Engineer at HIFI you will help own the security of our company and the infrastructure behind our payments products day to day. You'll build HIFI's security program from the ground up, including identity and access management, endpoint security, and the cloud and network controls that protect our systems and data. This is a hands‑on role with real ownership: you'll set the security roadmap based on risk, put core capabilities like monitoring, incident response, and secrets management in place, and write the policies that govern how HIFI handles access and information. You'll also be the person the team relies on to keep HIFI ready for audits and partner security reviews as we expand into more regulated markets.

What you will build

• Design and implement the HIFI security roadmap from first principles to production, prioritizing by risk.
• Lead threat modeling and hardening for our money movement systems.
• Build core security capabilities, including monitoring and detection, incident response, secrets management, API security, and CI/CD hardening.
• Own cloud and network security architecture, including segmentation, encryption, and least‑privilege access.
• Own endpoint and identity security across our devices and SaaS tools.
• Reinforce engineering best practices around secure development and infrastructure.
• Write and maintain information security policies and procedures.
• Ensure HIFI meets information security compliance and audit expectations as we scale to more regulated markets.
• Collaborate with engineering, product, compliance, and leadership to move fast without compromising safety.

You might be a fit if

• 6+ years of experience in security engineering.
• Deep, hands‑on AWS and network security experience, with infrastructure managed in Terraform.
• Experience owning security controls in a regulated environment, such as payments or financial services.
• Strong web application and API security skills, including modern authentication and authorization.
• Experience writing audit‑ready policies and procedures.
• Experience building security practices from the ground up in a fast‑paced startup.
• Hands‑on experience with SIEM, MDM, and database security, especially Postgres.
• A builder’s mindset: you ship practical fixes quickly and know when good enough is safe enough.
• Interest in stablecoins and their potential to change how money moves around the world.

Why This Role Matters

HIFI moves billions of dollars for banks and fintechs, and keeping that money safe depends on the security of everything behind it, from our cloud infrastructure to the laptops our team works on. This is a chance to build HIFI's security program from its foundation and make safety a default part of how the company operates as it grows.

Additional Requirement

Must be within a commutable distance from our office and able to work in person most days of the week.

Equal Opportunity Statement

HIFI is an equal opportunity employer. We do not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other legally protected status. We also provide reasonable accommodations during the hiring process.