Senior Security Engineer

Raydar; United States; On-site; USD 150,000 - 350,000; Full time

Benefits offered by this job

Medical insurance

Vision and dental coverage

Family coverage included

Job summary

Raydar is hiring a hands-on senior IC security engineer to own product and platform security for an AI-native mortgage technology stack. You will build secure-by-default libraries and tooling, review auth, tenant isolation and secrets handling, and run threat modeling for new features.

You will implement low-noise security automation in CI/CD and local workflows, collaborate with engineers to fix vulnerabilities with durable patterns, and help shape a lightweight secure SDLC while contributing

Qualifications

• 8+ years as a software engineer focused on security.
• Experience at software or SaaS companies with strong security posture.
• Proficiency in TypeScript and Node.
• Builder mindset with production code writing.
• Strong written communication for risks and runbooks.
• US citizen or green card holder (no visa sponsorship).

Responsibilities

• Build secure-by-default libraries, guardrails and internal tools.
• Review architecture, designs and production code for auth, tenant isolation, secrets handling and data exposure.
• Run pragmatic threat modeling for new features and services.
• Build security automation in CI/CD and local workflows (code scanning, policy, secrets).
• Work with engineers to fix vulnerabilities with reusable patterns.
• Help shape a lightweight secure SDLC and contribute to postmortems.

Skills

Security engineering

TypeScript

Node.js

Threat modeling

CI/CD automation

Written communication

Tools

Terraform

Pulumi

Job description

Our client is an AI-native mortgage technology company automating lending workflows for some of the largest lenders in the US. A top-10 US mortgage lender is going live as a primary customer, several other major lenders are in late-stage talks, and the company has years of runway. The stack is modern: a TypeScript monorepo, end-to-end type safety and 100% infrastructure as code.

The role

Raydar is recruiting for this role on behalf of our client. This is a hands-on senior IC engineering role focused on product and platform security, for someone who keeps a strong security posture without slowing development. The company handles highly sensitive personal and financial data, and good security here shows up as better architecture, safer defaults and useful tooling.

What you'll do

• Build secure-by-default libraries, guardrails and internal tools that make the secure path the easy path
• Review architecture, designs and production code for authentication, authorization, tenant isolation, secrets handling and data exposure
• Run pragmatic threat modeling for new features, services and integrations
• Build low-noise security automation in CI/CD and local workflows, including code scanning, dependency policy and secret detection
• Work directly with engineers to fix vulnerabilities with durable, reusable patterns
• Help shape a lightweight secure SDLC and contribute to incident analysis and postmortems

What we're looking for

• 8+ years as a software engineer specializing in security, or a software engineer who moved into security and still ships code
• Experience at software or SaaS companies with a strong security posture (big tech or security SaaS)
• Proficiency in TypeScript and Node: comfortable reading, navigating and making real changes to the codebase
• A builder mindset: you write production code and tools, not just scripts or policies
• Strong written communication for documenting risks and runbooks
• US citizen or green card holder (no visa sponsorship)

Tech stack:

• Deep AWS security experience (IAM, VPC, GuardDuty, KMS)
• Terraform or Pulumi proficiency
• Hands-on SOC 2 experience
• Security as a passion: bug bounties, write-ups or research in your spare time

Compensation and benefits

• $150K-$350K base, depending on level (Senior or Staff)
• 100% of employee and family medical premiums covered, plus vision and dental