Senior Platform Security Engineer - Fintech (Remote, Equity)

Space Executive; United States; Remote; USD 210,000 - 240,000; Full time

Benefits offered by this job

100% medical, dental and vision

401(k)

12 weeks parental leave

Unlimited PTO

Remote across the US/Canada

Job summary

Space Executive is seeking a Senior Platform Security Engineer for a fintech on a Series B footing. The role is remote across the US/Canada, or a hybrid option in NYC, focusing on securing the production edge and private banking integrations.

You’ll own mutual-TLS infrastructure, define secure-workflow standards, and drive end-to-end vulnerability remediation with a small, high-ownership team. The ideal candidate has 6+ years in platform/security, strong PKI/TLS, AWS networking, and a track

Qualifications

• 6+ years in platform, infrastructure or network security with hands-on ownership of production systems.
• Deep PKI and certificate lifecycle experience.
• Strong TLS/mTLS knowledge and AWS networking/security.
• Working knowledge of OAuth 2.0 and certificate-bound tokens.
• Experience setting security standards and driving adoption in engineering.

Responsibilities

• Own and operate mutual-TLS certificate infrastructure for enterprise onboarding.
• Build security workflow for private network connectivity and tenancy mapping.
• Manage webhook security: signing-secret rotation and client-cert management.
• Lead vulnerability remediation end-to-end from scanning to closure.
• Set and codify secure-build standards across engineering.

Skills

TLS/mTLS knowledge

PKI lifecycle

AWS security

OAuth 2.0

Certificate management

Security standards

Tools

AWS

AWS CDK

JWT validation

Job description

Space Executive is seeking a Senior Platform Security Engineer for a fintech on a Series B footing. The role is remote across the US/Canada, or a hybrid option in NYC, focusing on securing the production edge and private banking integrations.

You’ll own mutual-TLS infrastructure, define secure-workflow standards, and drive end-to-end vulnerability remediation with a small, high-ownership team. The ideal candidate has 6+ years in platform/security, strong PKI/TLS, AWS networking, and a track