Senior Security Engineer — Cloud & AI Security

FastSpring; United States; On-site; USD 155,000 - 187,000; Full time

Job summary

FastSpring seeks a Sr. Security Engineer to strengthen the security posture of our core payments platform across applications, cloud infrastructure, and AI-assisted development tooling.

You will collaborate with the Agentic Experience group and our CISO, shaping security practices for engineering teams and ensuring robust risk management and PCI DSS compliance. This hands-on role emphasizes measurable security improvements and cross-functional partnership.

Qualifications

• 7+ years of hands-on security engineering experience across applications, cloud, or infrastructure.
• Strong experience with AWS security services and primitives.
• Experience securing large production codebases; JVM ecosystem preferred.
• Familiarity with AI-assisted development tools and their security implications.
• Strong prioritization and communication skills for security investments.
• Experience in payments/fintech is a plus; relevant certifications are a plus but not required.

Responsibilities

• Identify, prioritize, and remediate vulnerabilities across Java-based platform and AWS infra.
• Drive infrastructure security improvements including IAM, instance metadata protections, and egress controls.
• Conduct security reviews of AI-assisted development pipelines and tool integrations.
• Develop and maintain secure development standards and guardrails for engineering teams.
• Partner with CISO on risk assessment, remediation planning, and PCI DSS compliance.
• Contribute to incident response readiness and security monitoring improvements.
• Communicate security priorities clearly to technical and executive stakeholders.

Skills

Security engineering

AWS security

JVM ecosystem

Tools

SAST

DAST

SCA

Job description

FastSpring seeks a Sr. Security Engineer to strengthen the security posture of our core payments platform across applications, cloud infrastructure, and AI-assisted development tooling.

You will collaborate with the Agentic Experience group and our CISO, shaping security practices for engineering teams and ensuring robust risk management and PCI DSS compliance. This hands-on role emphasizes measurable security improvements and cross-functional partnership.