Senior Security Engineer, Cloud & Fintech - Remote

Rozgoo; United States; Remote; USD 285,000 - 330,000; Full time

Benefits offered by this job

Medical, dental & vision insurance

Unlimited PTO

Work From Home flexibility

Commuter benefits

Free lunches

Paid parental leave

401(k)

Employee assistance program

Job summary

Parafin is seeking an experienced security-focused engineer to shape and scale our security posture across cloud and platform environments. You will design controls, tooling, and processes to keep infrastructure secure, compliant, and reliable while enabling rapid development.

You’ll partner with engineering and compliance teams to strengthen access management, threat detection, and incident response, following frameworks like SOC 2, PCI DSS, and ISO 27001.

Responsibilities

• Lead efforts to improve Parafin's overall security posture across infrastructure, applications, and data systems.
• Develop and maintain frameworks for identity, access management, and least-privilege enforcement.
• Establish and operate security monitoring, alerting, and incident response processes.
• Partner with product and infrastructure engineers to embed secure-by-default patterns in our systems and applications.
• Define and enforce standards for vulnerability management, secrets handling, and dependency integrity.
• Collaborate with compliance and risk teams to build and maintain controls aligned with SOC 2, PCI DSS, ISO 27001.
• Support audits and security assessments by ensuring controls are properly implemented and evidenced.
• Contribute to security awareness and training efforts across engineering teams.
• Influence long-term strategy on secure architecture, detection, and response automation.

Job description

Parafin is seeking an experienced security-focused engineer to shape and scale our security posture across cloud and platform environments. You will design controls, tooling, and processes to keep infrastructure secure, compliant, and reliable while enabling rapid development.

You’ll partner with engineering and compliance teams to strengthen access management, threat detection, and incident response, following frameworks like SOC 2, PCI DSS, and ISO 27001.