Senior Security Engineer

Angeles Investors, Inc.; San Francisco (CA); On-site; USD 180,000 - 240,000; Full time

Job summary

Finix is seeking a Security Engineer to design, implement, and operate secure cloud and corporate environments. You will partner with Engineering, Information Security, Compliance and IT to ensure secure delivery of Finix products in a fintech context.

You will lead security for AWS, CI/CD, and data handling, manage PCI DSS and SOC 2 controls, and drive remediation across the engineering org. Strong Java and cloud security skills are required.

Qualifications

• Requires 5+ years in security engineering, preferably cloud-native fintech or payments.
• Development experience in Java.
• Strong AWS security and infrastructure experience.
• Hands-on vulnerability remediation and incident response experience.
• Clear written and verbal communication for technical and non-technical audiences.
• Working knowledge of PCI DSS and other regulatory frameworks.
• Cryptography and key management experience.

Responsibilities

• Partner with Engineering on secure design and implementation of new features.
• Secure AWS infrastructure, workstations, and incident response leadership.
• Coordinate pentests, vulnerability scanning, and bug bounty remediation with engineering.
• Secure CI/CD pipelines and software supply chain.
• Own PCI architecture with engineering, including data handling and SDLC security.
• Support HSM operations, key exchanges, and injections.
• Build and maintain PCI DSS, SOC 2, and other controls.
• Support audit fieldwork and customer security questionnaires.
• Secure internal AI tooling and set guardrails for AI use.

Skills

Java development

Cloud security

Incident response

Security architecture

Technical communication

Tools

AWS

Terraform

Okta

CrowdStrike

Palo Alto Prisma Access

Job description

About Finix

Finix is building the global operating system for fintech, starting with payments. From startups to publicly traded companies, Finix processes tens of billions of dollars annually both in-store and online. Finix was founded in 2015 and is headquartered in San Francisco.

To date Finix has raised over $200M, including a $75M Series C led by Acrew Capital and Lightspeed Venture Partners and backed by American Express Ventures, Bain Capital Ventures, Homebrew, Inspired Capital, Visa, and others

About the Role

The Engineering organization at Finix owns the delivery and stability of our product end-to-end. As a Security Engineer, you will be responsible for the secure design, implementation, and operation of Finix’s cloud and corporate environments. You will work closely with Engineering, Information Security, Compliance, and IT.

This is an in-office position based in our San Francisco office.

You Will:

• Partner with Engineering on secure design and implementation of new features
• Secure our AWS infrastructure and workstations, and lead security incident response
• Coordinate pentests, vulnerability scanning, and the bug bounty program: triage findings, lead fixes, and drive remediation with engineering
• Secure our CI/CD pipelines and software supply chain
• Own PCI architecture with engineering, including scoping, data handling, and secure SDLC
• Support HSM operations, key exchanges, and key injections
• Build and maintain controls for PCI DSS, SOC 2, and other regulations
• Support audit fieldwork and customer security questionnaires
• Secure internal AI tooling and set guardrails for AI use across the company

You Have:

• 5+ years in security engineering, preferably in cloud-native fintech or payments
• Development experience in Java
• Strong AWS experience, including security services and infrastructure
• Hands-on vulnerability remediation experienceIncident response experience
• Clear written and verbal communication, including presenting findings and recommendations to technical and non-technical audiences
• Working knowledge of PCI DSS and other regulatory frameworks
• Cryptography and key management experience

Nice to Have:

• AWS Security Specialty, CISSP, or similar certification
• Bug bounty and hands-on pentest experience
• CI/CD pipeline experience
• Infrastructure as code experience (Terraform)
• Experience with IAM and identity providers such as Okta
• Experience with CrowdStrike, Palo Alto Prisma Access, or Sonatype Nexus

----------------------------------------

Finix is an equal opportunity employer and values diversity. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, disability status, or any other protected class.

Role: Security Engineer
Level: IC4-IC5
Location: San Francisco, CA
Compensation Range: $180,000 - $240,000/year + Equity + Benefits

Our salary ranges are determined by role, level, and location. The range displayed on each job posting reflects the minimum and maximum target for new hire salaries at our headquarters in San Francisco, California. Individual pay is determined by work location, job related skills, experience, and relevant education or training.