Sr. Security Engineer

FastSpring; United States; On-site; USD 155,000 - 187,000; Full time

Job summary

FastSpring seeks a Sr. Security Engineer to strengthen the security posture of our core payments platform across applications, cloud infrastructure, and AI-assisted development tooling.

You will collaborate with the Agentic Experience group and our CISO, shaping security practices for engineering teams and ensuring robust risk management and PCI DSS compliance. This hands-on role emphasizes measurable security improvements and cross-functional partnership.

Qualifications

• 7+ years of hands-on security engineering experience across applications, cloud, or infrastructure.
• Strong experience with AWS security services and primitives.
• Experience securing large production codebases; JVM ecosystem preferred.
• Familiarity with AI-assisted development tools and their security implications.
• Strong prioritization and communication skills for security investments.
• Experience in payments/fintech is a plus; relevant certifications are a plus but not required.

Responsibilities

• Identify, prioritize, and remediate vulnerabilities across Java-based platform and AWS infra.
• Drive infrastructure security improvements including IAM, instance metadata protections, and egress controls.
• Conduct security reviews of AI-assisted development pipelines and tool integrations.
• Develop and maintain secure development standards and guardrails for engineering teams.
• Partner with CISO on risk assessment, remediation planning, and PCI DSS compliance.
• Contribute to incident response readiness and security monitoring improvements.
• Communicate security priorities clearly to technical and executive stakeholders.

Skills

Security engineering

AWS security

JVM ecosystem

Tools

SAST

DAST

SCA

Job description

About FastSpring

FastSpring is how AI, SaaS, gaming, software, and digital product companies sell online in more places around the world. We handle all payment needs from checkout to taxes so you can go farther faster.

About FastSpring

FastSpring is how AI, SaaS, gaming, software, and digital product companies sell online in more places around the world. We handle all payment needs from checkout to taxes so you can go farther faster.

Founded in 2005, we are a privately owned company headquartered in Santa Barbara with offices in Amsterdam, Austin, Belfast, Dublin, Halifax, and Singapore.

Sr. Security Engineer

We are seeking a Sr. Security Engineer to join our Agentic Experience group, reporting to the Principal Engineer, Agentic Development. In this role, you will strengthen the security posture of our core payments platform while helping shape security practices for AI-assisted software development. You will work closely with our Agentic Experience group and our CISO, with visibility to executive leadership. This is a hands-on engineering role with broad scope: application security, cloud infrastructure security, and security review of AI/agentic development tooling.

Responsibilities & Goals

• Identify, prioritize, and remediate vulnerabilities across our Java-based platform and AWS infrastructure
• Drive infrastructure security improvements, including IAM policy refinement, instance metadata protections, and network egress controls
• Conduct security reviews of AI-assisted development pipelines, tool integrations, and agent-accessible services
• Develop and maintain secure development standards, patterns, and guardrails for engineering teams
• Partner with the fractional CISO on risk assessment, remediation planning, and compliance initiatives (including PCI DSS)
• Contribute to incident response readiness and security monitoring improvements
• Communicate security priorities and progress clearly to technical and executive stakeholders

Experience & Qualifications

• 7+ years of hands-on security engineering experience (application security, cloud security, or infrastructure security)
• Strong experience with AWS security services and primitives (IAM, VPC networking, secrets management)
• Experience working in and securing large production codebases; JVM ecosystem experience preferred
• Familiarity with modern AI-assisted development tools and an interest in their security implications
• Strong prioritization and communication skills; ability to advocate for security investments with stakeholders
• Experience in payments, fintech, or other regulated environments is a plus
• Relevant certifications (e.g., CISSP, OSCP, AWS Security Specialty) are a plus but not required

Nice to Have

• Security certifications (e.g., AWS Security Specialty, CISSP, OSCP, GIAC).
• Experience securing payments, ecommerce, or subscription/billing platforms.
• Experience with secure SDLC practices and integrating security tooling (SAST/DAST/SCA) into CI/CD.
• Familiarity with global, multi-currency, or tax-calculation systems and their data-sensitivity considerations.

Consistent with FastSpring's values and applicable law, we provide the following information to promote pay transparency and equity. The base pay range below represents a good faith estimate of the low and high end base pay range for the listed position. This role may be eligible for the corporate bonus plan (or, if a sales role, a commission plan as defined in the sales incentive plan document). In addition, FastSpring provides a variety of benefits to employees.

Estimated Base Pay Range

$155,000 - $187,000 USD

About The Company

FastSpring is an EQUAL EMPLOYMENT OPPORTUNITY/AFFIRMATIVE ACTION employer. Candidates are considered for employment with FastSpring without regard to their race, color, religion, national origin, age, sex, gender, pregnancy, disability, sexual orientation, gender identity, genetic information, military status, veteran status (specifically status as a disabled veteran, special disabled veteran, Vietnam Era veteran, recently separated veteran, armed forces service medal veteran, or other protected veteran) or other classification protected by applicable federal, state or local law.

AI Transparency Statement

FastSpring may utilize artificial intelligence (AI) or automated tools during portions of the recruitment process to assist with operational and administrative activities, including candidate communications, scheduling, application organization, and interview documentation. These tools are designed to support efficiency and consistency within the hiring process. AI systems are not used as the sole determinant of hiring outcomes, and all employment decisions are made by qualified human reviewers. We are committed to responsible and fair hiring practices and continue to evaluate our use of technology accordingly.