Senior Security Engineering Lead (AI-Driven Fintech)

Imprint; Buffalo (NY); On-site; USD 180,000 - 240,000; Full time

Benefits offered by this job

Competitive compensation

Comprehensive healthcare

Flexible PTO

High-end workstations

Parental leave

Industry-leading technology access

Job summary

Imprint is seeking an experienced Staff Engineer, Security to own the security engineering foundation end to end—from AI security governance to identity management and cloud security. You will define security strategy, work hands-on, and scale security across a fast-growing fintech environment.

The role emphasizes hands-on security leadership, threat modeling, and building scalable security controls in AWS, with PCI/DSS and SOC 2 considerations.

Qualifications

• 8+ years in security engineering or building a security function from scratch.
• Reads and reviews code in production languages such as Go/TypeScript.
• Deep AWS security knowledge including IAM, multi-account strategies, and privilege escalation.
• Experience operating within PCI DSS scope and shipping controls that survive audits.

Responsibilities

• Own AI security, including threat modeling and governance across products.
• Build and scale AI-native security capabilities for detection triage and compliance evidence.
• Lead application and cloud infrastructure security, including secure code reviews and CI/CD security.
• Drive identity and access controls, SSO rollout, and JIT elevation with IT.
• Partner with GRC to design controls meeting SOC 2, PCI, ISO requirements.

Skills

Security engineering

Go/TypeScript

AWS security

PCI DSS

Tools

SIEM/SOAR

Terraform

Kubernetes

Job description

Imprint is seeking an experienced Staff Engineer, Security to own the security engineering foundation end to end—from AI security governance to identity management and cloud security. You will define security strategy, work hands-on, and scale security across a fast-growing fintech environment.

The role emphasizes hands-on security leadership, threat modeling, and building scalable security controls in AWS, with PCI/DSS and SOC 2 considerations.