Senior Security Engineer, Identity & Compliance

Footprint; San Francisco (CA); On-site; USD 180,000 - 260,000; Full time

Benefits offered by this job

Equity

Job summary

Footprint is hiring the first security-focused engineer to own the product's security boundary end to end. You will work on vault and enclave security, the Percy sandbox, and end-user data paths in a heavily regulated fintech context.

You'll partner with the Head of Engineering to harden identity infrastructure, implement tamper-evident audit trails, and drive security across SOC 2 Type 2, PCI DSS Level 1, GDPR, and ISO 27001 compliance programs.

Qualifications

• 5+ years of hands-on security engineering in apps or infra.
• Deep understanding of encryption, key management, and access control.
• Experience preventing cross-tenant leaks and securing ephemeral compute.
• Experience with offensive security: pen testing, threat modeling, or vulnerability research.
• Hands-on AWS security: IAM, VPC, KMS, CloudTrail, GuardDuty.
• Familiarity with SOC 2 / PCI DSS audits and providing audit-ready evidence.
• Proven track record shipping security fixes proactively.

Responsibilities

• Own vault and enclave security architecture and hardening.
• Own Percy sandbox boundary and audit logs integrity.
• Secure end-user data path and SDK interactions with the vault.
• Ensure document pipeline integrity against forged inputs.
• Manage product security within SOC 2, PCI DSS, GDPR frameworks and run pentests.

Skills

Security engineering

Encryption & key management

Least privilege & ephemeral compute

Threat modeling

Pen testing

AWS security

SOC 2 / PCI DSS

Vulnerability remediation

Tools

Nitro Enclaves

IAM

CloudTrail

GuardDuty

KMS

Job description

Footprint is hiring the first security-focused engineer to own the product's security boundary end to end. You will work on vault and enclave security, the Percy sandbox, and end-user data paths in a heavily regulated fintech context.

You'll partner with the Head of Engineering to harden identity infrastructure, implement tamper-evident audit trails, and drive security across SOC 2 Type 2, PCI DSS Level 1, GDPR, and ISO 27001 compliance programs.