inhousefyi
← Back to listings

Security Engineer

ThunesSan Francisco, California, United States · Posted 4 months ago
Full-timeEst. 144,000 USD
Apply now

Description

Security Engineer Overview

Thunes Financial Services is hiring a Security Engineer to be the architect of trust for our fintech platform. We are looking for a hybrid specialist who can bridge the gap between Infrastructure Security and Application Security, ensuring our systems are as resilient as they are compliant. This role will play a critical part in maintaining our regulatory compliance posture while building automated, scalable security guardrails. This role reports to the VP of Engineering.

The Role

As a Security Engineer, you will be responsible for security across the full lifecycle of our fintech platform. This hybrid specialist role requires deep engagement with both infrastructure and application security, focusing heavily on automation and regulatory compliance within a high-stakes, regulated environment.

Day-to-day:

  • CI/CD Security Integration: Design, build, and maintain automation to integrate security testing (SAST/DAST/SCA) directly into our deployment pipelines. You'll ensure that security is a "paved road" for developers, not a bottleneck.
  • Full-Stack Security: Own security across the lifecycle—from securing our cloud infrastructure (AWS/GCP) to performing code reviews and architectural risk assessments.
  • Vulnerability Management: Manage our detection stack using modern vulnerability scanning and dependency management tools to identify, prioritize, and track risks across the environment.
  • Security Automation: Build and maintain automated workflows for vulnerability reporting, triage, and remediation. We want someone who leverages AI-powered agentic coding tools or similar automation to eliminate manual toil and accelerate response times.
  • Compliance Engineering: Monitor our technical security controls to ensure that they are operating effectively throughout the year to meet the rigorous cybersecurity compliance requirements to support regulatory exams as well as SOC-2 and PCI audits.
  • Incident Response: Serve as a key member of our security response team, helping to investigate and mitigate potential threats.

Collaborate with:

  • Product, data engineering, front-end engineering, tech ops, compliance, and legal

Tech stack:

Cloud (AWS/GCP, K8s), CI/CD tools (GitHub Actions, GitLab CI, or Jenkins), Python, Go, or Bash, SAST/DAST/SCA, enterprise vulnerability management platforms, automated dependency scanning solutions.

Success in this role means:

  • Ensuring systems are resilient and compliant.
  • Maintaining our regulatory compliance posture.
  • Building automated, scalable security guardrails.
  • Having a direct impact on the security strategy.

Travel:

  • Some travel required for periodic team offsites.

Knowledge Required

Qualifications

A Bachelor's degree in Computer Science or a related field, but similar professional experience is equally valued.

Experience

A proven track record of deep experience in both Infrastructure Security and Application Security is required.

Technical skills:

  • Pipeline Proficiency: Hands-on experience building security guardrails within CI/CD tools (e.g., GitHub Actions, GitLab CI, or Jenkins).
  • Hybrid Expertise: Deep experience in both Infrastructure Security (Cloud/K8s) and AppSec (OWASP Top 10, Secure SDLC).
  • Tooling Experience: Proven proficiency with enterprise vulnerability management platforms and automated dependency scanning solutions.
  • Automation Mindset: You don’t just find bugs; you write code (Python, Go, or Bash) to handle them. Experience using AI-driven automation or agentic tools to streamline security workflows is required.
  • Fintech Fluency: You understand the high-stakes nature of working in a regulated environment and can translate compliance requirements into technical reality.

Leadership and collaboration:

  • Clear, effective communication of trade-offs to non-technical stakeholders
  • History of collaboration with engineers and others

Nice to have but in no way required:

  • Certifications such as CISSP
  • Prior experience in startups, especially Fintech

Similar jobs

EncoraKuala Lumpur, Malaysia

Key Responsibilities 1. API & Ecosystem Architecture ● The API Fortress: Architect the security layer for our API Gateway (e.g., Kong, Apigee, AWS Gateway). Define global policies for Rate Limiting, Throttling, and A…

Full-time
Beyond FinanceChicago, Illinois, United States

Est. 185,000 USD

At Beyond Finance, we've made it our mission to help everyday Americans escape the endless cycle of crippling debt and step into a brighter financial future. Through compassionate, individualized care, a culture focused…

Full-time

Est. 177,500 USD

At Beyond Finance, we've made it our mission to help everyday Americans escape the endless cycle of crippling debt and step into a brighter financial future. Through compassionate, individualized care, a culture focused…

Full-timeRemote
FinLondon, England, United Kingdom

Est. 90,000 GBP

Fin is the AI Customer Agent company on a mission to help businesses provide perfect customer experiences. Our AI Agent Fin is the highest-performing AI Customer Agent on the market today, enabling businesses to deliver…

Full-time
Financial TimesLondon, United Kingdom

Est. 80,000 GBP

About Us The Financial Times is one of the world’s leading news organisations, globally recognised for its authority, integrity and accuracy, with a mission to deliver quality information and services worldwide. At the F…

Full-time
StripeNew York City, New York, United States

Est. 140,000 USD

Who we are About Privy Our mission is to make privacy and user ownership the default online. To do so, we build simple, flexible APIs and tools for developers that make it easy to build new products on crypto rails. Priv…

Full-time
FinLondon, England, United Kingdom

Est. 90,000 GBP

Fin is the AI Customer Agent company on a mission to help businesses provide perfect customer experiences. Our AI Agent Fin is the highest-performing AI Customer Agent on the market today, enabling businesses to deliver…

Full-time
FinDublin, Ireland

Est. 95,000 EUR

Fin is the AI Customer Agent company on a mission to help businesses provide perfect customer experiences. Our AI Agent Fin is the highest-performing AI Customer Agent on the market today, enabling businesses to deliver…

Full-time
FinDublin, Ireland

Est. 80,000 EUR

Fin is the AI Customer Agent company on a mission to help businesses provide perfect customer experiences. Our AI Agent Fin is the highest-performing AI Customer Agent on the market today, enabling businesses to deliver…

Full-time
Transmit SecurityTel Aviv-Yafo, Gush Dan, Israel

We offer the industry’s only platform that fuses customer identity and anti-fraud solutions – customer identity management, identity verification, and fraud prevention. We sell to industries with large, consumer-facing b…

Full-time
Financial TimesLondon, England, United Kingdom

Est. 120,000 GBP

About Us The Financial Times is one of the world’s leading news organisations, globally recognised for its authority, integrity and accuracy, with a mission to deliver quality information and services worldwide. At the F…

Full-time
StripeSan Francisco, California, United States

Est. 175,000 USD

Who we are About Stripe Stripe is a financial infrastructure platform for businesses. Millions of companies—from the world's largest enterprises to the most ambitious startups—use Stripe to accept payments, grow their re…

Full-time
Transmit SecurityTel Aviv-Yafo, Gush Dan, Israel

Job Description : We offer the industry’s only platform that seamlessly integrates customer identity and anti-fraud solutions, including identity management, identity verification, and fraud prevention. Our solutions ser…

Full-time
CHAOS IndustriesSan Francisco, California, United States

Est. 144,000 USD

CHAOS Industries is redefining modern defense with a multi-product portfolio that gives the ultimate advantage—domain dominance. The company's products are powered by Coherent Distributed Networks (CDN™), empowering warf…

Full-time
CHAOS IndustriesEl Segundo, California, United States

Est. 144,000 USD

CHAOS Industries is redefining modern defense with a multi-product portfolio that gives the ultimate advantage—domain dominance. The company's products are powered by Coherent Distributed Networks (CDN™), empowering warf…

Full-time
CHAOS IndustriesWashington, District of Columbia, United States

Est. 144,000 USD

CHAOS Industries is redefining modern defense with a multi-product portfolio that gives the ultimate advantage—domain dominance. The company's products are powered by Coherent Distributed Networks (CDN™), empowering warf…

Full-time

Est. 152,500 USD

At Beyond Finance, we've made it our mission to help everyday Americans escape the endless cycle of crippling debt and step into a brighter financial future. Through compassionate, individualized care, a culture focused…

Full-timeRemote
StripeSeattle, Washington, United States

Est. 175,000 USD

Who we are About Stripe Stripe is a financial infrastructure platform for businesses. Millions of companies—from the world's largest enterprises to the most ambitious startups—use Stripe to accept payments, grow their re…

Full-time
StripeSeattle, Washington, United States

Est. 144,000 USD

Who we are About Stripe Stripe is a financial infrastructure platform for businesses. Millions of companies—from the world's largest enterprises to the most ambitious startups—use Stripe to accept payments, grow their re…

Full-time
StripeSeattle, Washington, United States

Est. 175,000 USD

Who we are About Stripe Stripe is a financial infrastructure platform for businesses. Millions of companies—from the world's largest enterprises to the most ambitious startups—use Stripe to accept payments, grow their re…

Full-time
FinSan Francisco, California, United States

Est. 152,000 USD

Fin is the AI Customer Agent company on a mission to help businesses provide perfect customer experiences. Our AI Agent Fin is the highest-performing AI Customer Agent on the market today, enabling businesses to deliver…

Full-time
FinSan Francisco, California, United States

Est. 189,500 USD

Fin is the AI Customer Agent company on a mission to help businesses provide perfect customer experiences. Our AI Agent Fin is the highest-performing AI Customer Agent on the market today, enabling businesses to deliver…

Full-time
TruvetaHyderabad, India

Truveta provides unprecedented real-world data and real-time intelligence, powered by a dataset built with and owned by US health systems united in a mission of Saving Lives with Data. Together, we power breakthrough med…

Full-time
StripeToronto, Ontario, Canada

Who we are About Stripe Stripe is a financial infrastructure platform for businesses. Millions of companies - from the world’s largest enterprises to the most ambitious startups - use Stripe to accept payments, grow thei…

Full-time

Est. 120,000 USD

We are working with a decentralised exchange which looks to innovate on providing the best of CEXs and DEXs, focusing on building a safe, simple and scalable platform for trading. They differentiate themselves by offerin…

Full-timeRemote

We are working with a decentralised exchange which looks to innovate on providing the best of CEXs and DEXs, focusing on building a safe, simple and scalable platform for trading. They differentiate themselves by offerin…

Full-timeRemote

We are working with a decentralised exchange which looks to innovate on providing the best of CEXs and DEXs, focusing on building a safe, simple and scalable platform for trading. They differentiate themselves by offerin…

Full-timeRemote

We are working with a decentralised exchange which looks to innovate on providing the best of CEXs and DEXs, focusing on building a safe, simple and scalable platform for trading. They differentiate themselves by offerin…

Full-timeRemote

We are working with a decentralised exchange which looks to innovate on providing the best of CEXs and DEXs, focusing on building a safe, simple and scalable platform for trading. They differentiate themselves by offerin…

Full-timeRemote

We are working with a decentralised exchange which looks to innovate on providing the best of CEXs and DEXs, focusing on building a safe, simple and scalable platform for trading. They differentiate themselves by offerin…

Full-timeRemote