Senior Security Engineer

Wave; United States; Remote; USD 167,000 - 204,000; Full time

Benefits offered by this job

Equity

Remote work

Health insurance

Retirement contributions

Paid parental leave

Fertility assistance

Flexible vacation

Charitable donation matching

Job summary

Wave is seeking an experienced security engineer to own application security across product teams, protecting services that handle customers’ money. The role spans hands‑on security engineering, infrastructure collaboration, and defining practical safeguards for AI agents used in engineering and operations.

You will review APIs, improve secrets management, set policies for safe AI use, and tune AI‑assisted security operations.

Qualifications

• 7–8 years of professional experience in security roles, including 3–5 years in security-focused positions.
• Strong Python skills and fluent English.
• Ability to work across application security and complex systems while balancing security with delivery speed.
• Experience communicating secure engineering practices and collaborating with product and infrastructure teams.
• Interest in AI security and governance; practical experience with LLM-based security tools is relevant.

Responsibilities

• Review public APIs and help centralize login, permissions, and privileged access controls.
• Improve secrets management through shorter‑lived credentials and narrower access scopes.
• Establish policies and technical controls for safe AI use, including protections against prompt injection, excessive permissions, and data exposure.
• Evaluate and tune AI‑assisted security operations, such as alert triage and response workflows.
• Secure integrations and code-review agents, and help infrastructure teams assess database security.
• Work with engineers to build secure patterns into new and existing systems.

Skills

Python

English (Fluent)

Cross-functional collaboration

Tools

LLM-based security tools

Job description

Role overview

Own application security work across product teams, helping protect services that handle customers’ money. The role spans hands‑on security engineering, infrastructure collaboration, and defining practical safeguards for AI agents used in engineering and operations.

Responsibilities

• Review public APIs and help centralize login, permissions, and privileged access controls.
• Improve secrets management through shorter‑lived credentials and narrower access scopes.
• Establish policies and technical controls for safe AI use, including protections against prompt injection, excessive permissions, and data exposure.
• Evaluate and tune AI‑assisted security operations, such as alert triage and response workflows.
• Secure integrations and code‑review agents, and help infrastructure teams assess database security.
• Work with engineers to build secure patterns into new and existing systems.

Requirements

• At least 7–8 years of professional experience, including 3–5 years in security‑focused roles.
• Strong Python skills and fluent English.
• Ability to work across application security and complex systems while balancing security with delivery speed.
• Experience communicating secure engineering practices and collaborating with product and infrastructure teams.
• Interest in AI security and governance; practical experience with LLM‑based security tools is relevant.

Nice to have

• Familiarity with ISO 27001 or PCI DSS and experience remediating security findings.
• Experience developing governance for AI use in regulated financial services.

Benefits and work setup

• Remote work from locations between UTC−5 and UTC+4 with reliable internet; the team supports up to three in‑person gatherings annually.
• Salary up to $185,800 USD or local equivalent, depending on experience, plus equity.
• Health insurance and retirement contributions vary by country. Other listed benefits include six months of paid parental leave, fertility assistance, flexible vacation, and charitable donation matching.