Senior Security Engineer

Arta Finance; San Francisco (CA); On-site; USD 110,000 - 180,000; Full time

Job summary

Arta Finance seeks a Senior Security Engineer to safeguard sensitive financial data and ensure compliance with regulatory standards. The role requires extensive experience in cybersecurity and cloud security alongside the ability to work collaboratively across teams. Candidates should possess strong scripting skills and a deep understanding of modern security practices within a fast-paced fintech environment.

Benefits

Competitive salary

Robust health insurance

20 weeks of parental leave

15 days PTO annually

Qualifications

• At least 8 years in software/data engineering; ideally in financial services.
• 5 years minimum in information security/cybersecurity.
• Strong scripting abilities in Python, TypeScript, and Bash.

Responsibilities

• Monitor and triage security issues and vulnerabilities.
• Ensure compliance with financial standards like SOC 2, GDPR.
• Implement data security measures and educate team on best practices.

Skills

Network Security

Encryption

Access Control

Incident Response

Scripting

Compliance Standards

Education

Bachelor's or higher in Computer Science or related field

Tools

AWS

Azure

GCP

SIEM Tools (e.g., Splunk, Datadog)

Docker

Kubernetes

Job description

Arta is on an audacious and incredibly rewarding mission : to pave the way for people everywhere to lead more successful financial lives. Arta leverages AI and sophisticated digital tools—once reserved for ultra-high-net-worth individuals—and makes them accessible to a broader global audience. Think of it as your own digital family office , combining intelligent investment strategies, alternative assets, private market access, and smart automation to help you grow and protect your wealth effortlessly. We value trust, teamwork, and adaptability.

The Role

As a Senior Security Engineer, you will play a critical role in protecting sensitive financial data, client assets, and infrastructure from cyber threats. You are responsible for application of the latest security posture management tools, design and implementation of best security practices across the entire system — internal and client-facing application, and cloud infrastructure .You will collaborate with the CISO (Chief Information Security Officer), CTO, product, devops, and legal / compliance teams.

What You Will Do

Application Security

Monitor and triage security issues discovered by security posture monitoring tools

Identify and fix vulnerabilities in web / mobile apps

Perform code reviews and plan penetration testing

Collaborate with developers to secure new and existing features

Set up firewalls, proxies, IAM policies, VPCs, and network monitoring dashboards

Configure and manage encryption keys and other secrets

Compliance & Risk Management

Ensure adherence to financial compliance standards (e.g., SOC 2, MAS, GDPR, ISO 27001)

Conduct risk assessments and audits

Support documentation and evidence gathering for audits

Security Monitoring & Incident Response

Set up and tune SIEM tools (like Splunk or Datadog)

Lead or support incident response (IR) and post-mortem analysis

Data Security & Privacy

Implement controls for data encryption, tokenization, and access control

Ensure customer financial data (e.g., KYC, investment info) is protected

Security Awareness & Culture

Educate the team on phishing, secure coding, and access hygiene

Define and setup endpoint security policies

Help foster a “security-first” culture in a fast-moving startup

Who You Are

At least 8 years of work experience in software or data engineering, ideally in financial services and / or fintech industry

At least 5 years of hands-on experience in information security, cybersecurity, or cloud security roles

Advanced scripting or programming ability in Python, TypeScript, and Bash

Strong understanding of network security, encryption, authentication, and access control

Extensive experience with cloud platforms such as AWS / Azure , and preferably GCP , along with cloud-native technologies.

Experience implementing zero-trust architecture , secrets management (e.g., HashiCorp Vault), and DevSecOps practices

Familiarity with container and orchestration security (Docker, Kubernetes, Istio)

Experience conducting or leading threat modeling , penetration testing , or incident response

Experience with application security practices , such as code scanning (e.g., Snyk, Checkmarx) and OWASP Top 10

Familiarity with SIEM tools , intrusion detection systems, and endpoint protection

Ability to implement and maintain identity and access management policies (SSO, MFA, RBAC)

Understanding of financial regulatory standards such as SOC 2 , ISO 27001 , PCI-DSS , or GDPR

Basic knowledge of risk assessment and compliance requirements in a fintech environment

Strong communication skills with ability to collaborate across engineering, product, and compliance teams

Ability to explain complex security concepts in simple terms to non-technical stakeholders

Authorized to work in the United States

Based in the Bay area , or you have plans to relocate

Interview Process

Intro call with the Head of Talent, 30m

Technical Interview 1 : Coding (in Python) / Algorithm / Data Structure, 60m

Technical Interview 2 : Domain Knowledge and Security System Design with CTO, 60m

Technical Interview 3 : General Assessment by CIO / Head of AI Research, 30-45m

Culture & Collaboration Interview with a Product Manager, 30m

What We Offer

A competitive salary and benefits package, with ample opportunities for growth and advancement

A vibrant and dynamic work environment where innovation, collaboration, and continuous learning are highly valued

The opportunity to work with a diverse and talented team of industry experts, passionate about shaping the future of finance

Robust health insurance offering for you and your family

High deductible health plan available with health savings account contribution

20 weeks of parental leave

15 days PTO annually plus national and company holidays

We determine your salary based on factors including your interview performance, job-related skills, experience, and relevant education or training. Our offers are based on salary bands that are updated periodically using market benchmarks and consider geographic location as well (for example, higher cost regions like San Francisco or New York). If you are presented with an offer, we will review the base salary, benefits, number of options, notional option value and strike price. We would like to know if you accept our offer within 7 days.

Please keep in mind that the equity portion of your offer is not included in these numbers and represents a significant part of your total compensation.

IC I : $110,000-$180,000

IC II : $160,000-$230,000

IC III : $180,000-$300,000

J-18808-Ljbffr

Create a job alert for this search

Senior Security Engineer • San Francisco, CA, United States