Senior Security Engineer - Secure FinTech Platform (Remote)

Cherry Technologies, Inc.; United States; Remote; USD 150,000 - 190,000; Full time

Benefits offered by this job

Generous equity grant

Medical, vision, and dental benefits

Fully remote company

Flexible PTO

Job summary

Cherry is seeking a Sr/Staff Security Engineer to embed within our engineering team and own security across the product surface from threat modeling to hardening authentication, cloud infrastructure, and payment flows.

You will partner with product and engineering to review designs, drive a security program, and mentor engineers while ensuring compliance with PCI DSS and industry best practices in a fast-growing FinTech environment.

Qualifications

• 5+ years in product security or security engineering.
• Expertise in authentication/authorization: OAuth 2.0, OIDC, JWT, SAML, RBAC/ABAC, and session management.
• Cloud security in AWS: IAM, VPC, EKS/ECS, and infrastructure-as-code.
• Knowledge of OWASP Top 10, threat modeling, secure code reviews, and vulnerability remediation.
• Experience integrating security tooling (SAST, DAST, SCA) into CI/CD pipelines.
• Excellent communication and cross-functional collaboration skills.

Responsibilities

• Partner with product and engineering to perform security design reviews and threat modeling for features.
• Own and evolve the product security program — secure coding standards, vulnerability management, security testing.
• Lead security reviews for authentication/authorization systems across web and mobile products.
• Assess and improve security posture of cloud infrastructure, IAM, secrets management, and container security.
• Champion security practices for payment processing and handling of financial/health data in line with PCI DSS.
• Coordinate or conduct penetration tests, red team exercises, and bug bounty triage; drive remediation.
• Build security tooling integrated into the SDLC (SAST, DAST, SCA, runtime protection).
• Respond to security incidents, perform root cause analysis, and implement lasting fixes.
• Educate and mentor engineers on security principles across the organization.
• Monitor threat landscape for FinTech and healthcare-adjacent payment products.

Skills

Product security

Application security

Security engineering

OAuth 2.0

AWS security

Penetration testing

CI/CD security tooling

SAST

DAST

SCA

Tools

SAST

DAST

SCA

Job description

Cherry is seeking a Sr/Staff Security Engineer to embed within our engineering team and own security across the product surface from threat modeling to hardening authentication, cloud infrastructure, and payment flows.

You will partner with product and engineering to review designs, drive a security program, and mentor engineers while ensuring compliance with PCI DSS and industry best practices in a fast-growing FinTech environment.