Senior Platform Security Engineer

United States Digital Space LLC; United States; Hybrid; USD 160,000 - 260,000; Full time

Benefits offered by this job

Competitive Compensation

Meaningful Equity

Health Benefits

401(k)

Parental Leave

Unlimited PTO

Hybrid NYC HQ / remote options

Work from home stipend

Job summary

the company is seeking a Senior Platform Security Engineer to own the security of the production edge that connects us to enterprise bank customers. You will work across certificate lifecycle operations, network security architecture, and vulnerability management on a small, high-ownership team where your decisions directly protect the systems processing billions of transactions.

Responsibilities include securing mutual-TLS infrastructure, private network connectivity, webhook security, and

Qualifications

• 6+ years of experience in platform, infrastructure, or network security engineering with hands-on production ownership.
• Deep experience with PKI and certificate lifecycle management.
• Strong understanding of TLS/mTLS and related security protocols.
• Hands-on AWS networking and security experience.
• Working knowledge of OAuth 2.0 (client-credentials flow, JWT validation) and certificate-bound token patterns.
• Experience setting security standards and collaborating with engineering teams to adopt them.

Responsibilities

• Own and operate secure infrastructure for production edge connections.
• Develop and maintain certificate lifecycle and mutual-TLS workflows for enterprise onboarding.
• Manage network and endpoint security configurations and monitoring.
• Lead vulnerability remediation end-to-end from scanning to closure.
• Set secure-build standards and enforce them across engineering teams.
• Collaborate across engineering, product, and GTM teams to improve overall security posture.

Skills

6+ years security engineering

PKI & certificate lifecycle

TLS/mTLS expertise

AWS networking & security

OAuth 2.0 / JWT

Security standards adoption

Tools

AWS CDK

Job description

What is the company?

Financial institutions process billions of transactions every day across cards, ACH, wires, and third party aggregators. But most of that data is difficult to use. Descriptions are inconsistent, merchant names don’t match, and categories vary by payment type.

the company is a data and AI platform that turns messy transaction strings into structured, verified records — and gives teams the tools to act on it across authorization, attribution, analytics, and AI initiatives. the company leads the market in terms of merchant coverage, matching accuracy, geolocation data, and speed of transaction enrichment. Customers such as, FIS, Bilt, Mercury, Stripe, alongside many other leaders in fintech and financial services, trust the company's data to enable personalized rewards programs, accurate applied spending rules, precise analytics requests, and innovative AI-powered features.

the company is a fast growing, Series B company backed by industry experts and top tier investors (including Oak HC/FT, a16z, Flourish Ventures, Y-Combinator, and Gradient Ventures). We’re a lean and execution-oriented hybrid team, passionate about building exceptional products for our growing customer base. We care deeply about diversity of background, experience, and opinion. We value empathy, curiosity, and passion, and strive to create an environment where individuals have autonomy and the ability to take ownership over their work.

What will you be doing?

As a Senior Platform Security Engineer, you'll own the security of the company's production edge that connects us to our enterprise bank customers. You'll work across certificate lifecycle operations, network security architecture, and vulnerability management on a small, high-ownership team where your decisions directly protect the systems processing billions of transactions.

• Own and operate mutual-TLS certificate infrastructure for enterprise bank onboarding and product operations
• Build and maintain the security workflow for private network connectivity, including endpoint tenancy mapping and connection monitoring
• Operate webhook delivery security from signing-secret rotation, client-certificate management, and delivery-failure response for outbound integrations
• Drive vulnerability remediation end-to-end from application and infrastructure scanning through verified closure
• Set and codify secure-build standards for the engineering team
• Continuously improve our security posture by collaborating across engineering, product, and go-to-market to deliver value to customers and internal stakeholders

What experience, skills, and qualifications are necessary?

• Must-have:

+ 6+ years of experience in platform, infrastructure, or network security engineering, with hands-on ownership of production systems+ Deep experience with PKI and certificate lifecycle management+ Strong understanding of TLS/mTLS+ Hands-on AWS networking and security experience+ Working knowledge of OAuth 2.0 (client-credentials flow, JWT validation) and familiarity with certificate-bound token patterns+ Experience setting security standards and working with engineering teams to adopt them

• Nice-to-have:

+ Fintech or payments background; experience integrating with bank or financial institution network edges+ Experience with cloud infrastructure and tools like AWS CDK+ PCI DSS or SOC 2 technical control implementation+ Prior experience on a small or early-stage security team

Why Join the company?

• Be a cultural founder. As an early employee, you’ll play a meaningful role in defining and building our culture.
• Get in on the ground floor. We’re a small but well-funded team – joining now comes with limited risk and unlimited upside.
• Build the next generation of financial infrastructure. Our products will power the next wave of innovation in fintech, helping our customers deliver better, more transparent products and services to the consumer.

Benefits at the company:

• Competitive Compensation. Data-driven salaries that reward performance and ownership.
• Meaningful Equity. Flexibility with early exercise and an extended post-termination options.
• Comprehensive Health Benefits. 100% paid medical, mental, dental, and vision premium option plus One Medical membership (for US-based employees).
• 401(k). Empowering you to invest in your future.
• Paid Parental Leave. 12 weeks of full pay for parents welcoming a new child into their home.
• Unlimited PTO. Take the time you need to unplug and unwind.
• Flexible In-Person Culture. NYC HQ (hybrid and dog-friendly) with remote opportunities for certain roles in US/Canada.
• Supporting you in and outside of work. Generous work from home stipend, company-paid lunches, Citibike Membership, and more.

Salary Range:

• At the company, we view total compensation as consisting of salary + equity + benefits. We recruit motivated and high performing talent, and work to compensate people in line with the value they bring to our team.
• We aim to pay fairly and competitively, and consider a number of factors in developing compensation offers. These factors include years and breadth of experience, interview performance, market dynamics, and internal equity.
• The anticipated base salary range for this role is listed above (in USD).

Diversity & Inclusion at the company:

the company is an equal opportunity employer, committed to building a culture that is diverse, equitable, and inclusive. We believe that having people with different backgrounds, experiences, abilities, and perspectives not only helps us build the best products for our customers, but also helps us be the best version of ourselves.