Senior Security Engineer - Remote, AI-Driven Mortgage

Loancrate Inc.; Oregon; Hybrid; USD 140,000 - 190,000; Full time

Benefits offered by this job

Robust medical coverage

Vision & dental coverage

401(k)

HSA / FSA

Remote-first culture

Flexible time off

Job summary

Loancrate Inc. is seeking a Senior Software Engineer - Security to strengthen our security posture across applications and cloud infrastructure.

You will lead threat modeling, build secure-by-default patterns, and integrate security tooling into our CI/CD pipeline to help engineers move fast while sleep well at night. You will own the SOC 2 Type II program, partner with engineering on evidence collection, and drive continuous improvement of identity, access, and data protection across our

Qualifications

• 5+ years in application security or security engineering.
• Experience with AWS IAM, VPC, GuardDuty, Security Hub, CloudTrail.
• Familiarity with SOC 2 Type II controls and audit workflows.
• Fintech or regulated industry experience is a plus.

Responsibilities

• Lead threat modeling and risk assessments across app and cloud.
• Integrate security tooling into CI/CD pipelines and automate checks.
• Own SOC 2 Type II program design, evidence collection, and auditor liaison.
• Hardening of AWS environment and secure-by-default patterns.
• Coordinate incident response and postmortems with stakeholders.
• Maintain secure SDLC with training, docs, and developer enablement.

Skills

Threat modeling

OWASP Top 10

Secure coding

Incident response

Security automation

Strong communication

Collaboration with engineers

Identity and access

Tools

Terraform

Pulumi

SAST/DAST tooling

CI/CD security tooling

AWS security services

Job description

Loancrate Inc. is seeking a Senior Software Engineer - Security to strengthen our security posture across applications and cloud infrastructure.

You will lead threat modeling, build secure-by-default patterns, and integrate security tooling into our CI/CD pipeline to help engineers move fast while sleep well at night. You will own the SOC 2 Type II program, partner with engineering on evidence collection, and drive continuous improvement of identity, access, and data protection across our