True Talent Solutions Partners
Senior Security Engineer
Hands-on senior application security engineer (individual contributor) on a fintech security team: building appsec tooling and secure SDLC practices, securing AI agent workflows, automating detection and vulnerability management, leading incident response, and supporting SOC 2/ISO 27001. Works with TypeScript/JavaScript and AWS or GCP, on-site in San Francisco.
- Compensation
- $190K–$250K / yr
- Location
- San Francisco
- Work setup
- Onsite
- Seniority
- Senior
- Employment
- Full time
- Experience
- Not specified
- Category
- Security
- Posted
Skills
Must have
- 4-8 years of application or product security experience, including at least 3 years of hands-on work (secure code reviews, threat modeling, penetration testing, or security tooling)
- Technical bachelor's degree and strong software engineering fundamentals; individual contributor role, not management
- Experience building security practices in a fast-growing startup or technology company
- Familiarity with TypeScript or JavaScript, AWS or GCP, cloud security, DevSecOps, and secure SDLC practices
Nice to have
- Knowledge of AI or LLM security
- Experience in fintech or regulated B2B SaaS
- Experience with SOC 2 or ISO 27001 and establishing security programs
Full description
About the Role
Join a growing fintech security team as a hands-on application security leader. You will strengthen the security program and help protect AI-powered workflows in a regulated financial services environment.
What You'll Do
- Build and mature application security tooling, processes, and secure software development practices that fit naturally into engineering workflows.
- Partner with engineers to design secure AI agent workflows, protect data privacy, and address AI-specific vulnerabilities.
- Automate security processes, including detection pipelines and vulnerability management, to reduce manual work.
- Lead incident response and turn lessons from incidents into lasting security improvements.
- Support SOC 2, ISO 27001, and financial institution security requirements.
What We're Looking For
- Four to eight years of application or product security experience, including at least three years focused primarily on hands-on work such as secure code reviews, threat modeling, penetration testing, or security tooling.
- A technical bachelor's degree and strong software engineering fundamentals; this is an individual contributor role, not a management position.
- Experience building security practices in a fast-growing startup or technology company.
- Familiarity with TypeScript or JavaScript, AWS or GCP, cloud security, DevSecOps, and secure SDLC practices.
- Knowledge of AI or LLM security and experience in fintech or regulated B2B SaaS are useful.
- Experience with SOC 2 or ISO 27001 and establishing security programs is an advantage.
Compensation & Benefits
Base salary: $190,000 to $250,000 annually. Visa sponsorship is available.
Location
On-site in San Francisco, California.