Senior Security Engineer: Fintech, Secure-by-Default Remote

Loancrate Inc.; United States; Remote; USD 140,000 - 190,000; Full time

Benefits offered by this job

Medical coverage (100% employee + 1)

Vision & dental coverage

401(k)

HSA / FSA

Remote-first culture

Flexible time off

Job summary

Loancrate Inc. is seeking a Senior Security Engineer to strengthen security across our fintech platform. You will build guardrails, tooling, and secure defaults to help engineers move fast while sleeping well at night.

You’ll own application, cloud, and identity security, work with governance and internal tooling, and drive the SOC 2 Type II program. This is a remote-first role with exposure to regulated data and fast-moving teams.

Qualifications

• Experience in threat modeling and threat modeling across applications and infra.
• Proficient in OWASP Top 10 and secure coding practices.
• Hands-on with SAST/DAST tooling and secure software supply chain.
• Strong AWS security background (IAM, VPC, GuardDuty, CloudTrail).
• Proficient with infrastructure-as-code (Terraform, Pulumi).
• Experience with CI/CD security integrations and developer enablement.

Responsibilities

• Lead Loancrate’s security posture across applications, cloud, identity, and compliance.
• Perform threat modeling, vulnerability assessments, and pentesting with rapid remediation.
• Develop and maintain security tooling integrated into CI/CD pipelines.
• Harden AWS environment and manage secrets, logging, and monitoring.
• Own SOC 2 Type II program, evidence collection, and auditor relationships.
• Coordinate incident response and maintain secure SDLC with dev teams.

Skills

Threat modeling

OWASP Top 10

SAST/DAST tooling

AWS security

Terraform

Pulumi

CI/CD security

Fintech/regulatory

Collaboration with engineering

Identity and access management

Tools

Terraform

Pulumi

Docker

Buildkite

GitHub

CloudWatch

Job description

Loancrate Inc. is seeking a Senior Security Engineer to strengthen security across our fintech platform. You will build guardrails, tooling, and secure defaults to help engineers move fast while sleeping well at night.

You’ll own application, cloud, and identity security, work with governance and internal tooling, and drive the SOC 2 Type II program. This is a remote-first role with exposure to regulated data and fast-moving teams.