Senior Cloud Security Engineer – Fintech & PCI Focus

Finix Payments; San Francisco (CA); On-site; USD 180,000 - 240,000; Full time

Benefits offered by this job

Equity

Benefits

Job summary

Finix Payments is seeking a Security Engineer in San Francisco to design, implement, and operate secure cloud and on-prem environments. You will partner with Engineering, Information Security, Compliance, and IT to build resilient systems and protect data.

Responsibilities include securing AWS infrastructure, leading incident response, coordinating pentests and audits, and guiding secure SDLC and PCI controls. 5+ years in security engineering and strong Java/AWS skills are required.

Qualifications

• 5+ years in security engineering, preferably in cloud-native fintech or payments.
• Development experience in Java.
• Strong AWS experience, including security services and infrastructure.
• Hands-on vulnerability remediation experience.
• Incident response experience.
• Clear written and verbal communication, including presenting findings and recommendations to technical and non-technical audiences.
• Working knowledge of PCI DSS and other regulatory frameworks.
• Cryptography and key management experience.

Responsibilities

• Partner with Engineering on secure design and implementation of new features
• Secure our AWS infrastructure and workstations, and lead security incident response
• Coordinate pentests, vulnerability scanning, and the bug bounty program: triage findings, lead fixes, and drive remediation with engineering
• Secure our CI/CD pipelines and software supply chain
• Own PCI architecture with engineering, including scoping, data handling, and secure SDLC
• Support HSM operations, key exchanges, and key injections
• Build and maintain controls for PCI DSS, SOC 2, and other regulations
• Support audit fieldwork and customer security questionnaires
• Secure internal AI tooling and set guardrails for AI use across the company

Skills

Security engineering

Java development

AWS security

Incident response

Regulatory knowledge

Communication

Crypto & key management

Tools

Terraform

Okta

CrowdStrike

Palo Alto Prisma Access

Sonatype Nexus

Job description

Finix Payments is seeking a Security Engineer in San Francisco to design, implement, and operate secure cloud and on-prem environments. You will partner with Engineering, Information Security, Compliance, and IT to build resilient systems and protect data.

Responsibilities include securing AWS infrastructure, leading incident response, coordinating pentests and audits, and guiding secure SDLC and PCI controls. 5+ years in security engineering and strong Java/AWS skills are required.