Senior & Staff Security Engineer - Remote FinTech

Cherry Technologies, Inc.; United States; Remote; USD 150,000 - 210,000; Full time

Benefits offered by this job

Medical, vision, dental benefits

Fully remote company

Flexible PTO

Job summary

Cherry Technologies, Inc. is seeking a Sr/Staff Security Engineer to embed within our engineering teams.

This fully remote, full-time role focuses on building secure fintech products for medical practices, with emphasis on authentication, cloud security, and payment flows. You will partner with product and engineering to threat-model new features, lead security reviews, and shape the security program across the platform.

Qualifications

• 5+ years of product/security engineering experience.
• Deep expertise in authentication/authorization (OAuth 2.0, OIDC, JWT, SAML).
• Cloud security with AWS, IAM, VPC, EKS/ECS and IaC.

Responsibilities

• Partner with product/engineering for security design reviews and threat modeling.
• Own and evolve the product security program and vulnerability management.
• Lead security reviews for authentication/authorization across web/mobile.
• Assess and improve security of cloud infrastructure including IAM and container security.
• Champion security practices for payment processing and data handling (PCI DSS).
• Coordinate penetration tests, red team exercises, and bug bounty triage; drive remediation.
• Build and integrate security tooling into the SDLC (SAST, DAST, SCA, runtime protection).
• Respond to security incidents with root cause analysis and fixes.
• Educate engineers on security principles and foster a culture of security ownership.
• Monitor FinTech/healthcare risk landscape and emerging threats.

Skills

5+ years exp

OAuth 2.0

OIDC

JWT

SAML

RBAC/ABAC

Session management

Threat modeling

OWASP Top 10

Secure coding

CI/CD security

Tools

AWS

IAM

VPC

EKS/ECS

Terraform/CFN

SAST tools

DAST tools

SCA tools

Job description

Cherry Technologies, Inc. is seeking a Sr/Staff Security Engineer to embed within our engineering teams.

This fully remote, full-time role focuses on building secure fintech products for medical practices, with emphasis on authentication, cloud security, and payment flows. You will partner with product and engineering to threat-model new features, lead security reviews, and shape the security program across the platform.