Senior Security Engineer (Fintech) – AWS, CI/CD, Remote

loancrate.com; United States; Teletrabalho; USD 150 000 - 230 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Medical coverage

Vision and dental

401(k)

HSA/FSA

Remote-first culture

Flexible time off

Resumo da oferta

Loancrate, a fintech company building AI-native mortgage tooling, seeks a Senior Software Engineer – Security to strengthen security across applications and cloud. You will lead threat modeling, build secure-by-default patterns, and own SOC 2 Type II readiness while collaborating with engineering and leadership.

Our stack includes AWS, Terraform, Pulumi, Docker/ECS, and a TypeScript/Node.js frontend. Remote-first, US-based, with competitive benefits and a culture of open communication and fast

Qualificações

• Deep application security experience across fintech or regulated industries.
• Proven ability to model threats and translate findings into concrete mitigations.
• Hands-on security tooling inside CI/CD pipelines and IaC.
• Experience with SOC 2 controls and auditor coordination.

Responsabilidades

• Lead and evolve Loancrate’s security posture across cloud, identity, and applications.
• Perform threat modeling, vulnerability assessments, and pen testing with engineering teams.
• Develop secure-by-default patterns and libraries for rapid developer adoption.
• Own identity, access controls, and SaaS vendor security management.
• Drive SOC 2 Type II readiness and evidence automation.

Conhecimentos

App security

Threat modeling

Secure code review

SAST/DAST tooling

SOC 2

CI/CD security

Fintech experience

Collaboration

Identity and access

Ferramentas

Terraform

Pulumi

Docker

ECS

AWS Security

GuardDuty

KMS

CI/CD tooling

Descrição da oferta de emprego

Loancrate, a fintech company building AI-native mortgage tooling, seeks a Senior Software Engineer – Security to strengthen security across applications and cloud. You will lead threat modeling, build secure-by-default patterns, and own SOC 2 Type II readiness while collaborating with engineering and leadership.

Our stack includes AWS, Terraform, Pulumi, Docker/ECS, and a TypeScript/Node.js frontend. Remote-first, US-based, with competitive benefits and a culture of open communication and fast