Product Security Engineer

We're looking for a Product Security Engineer to build and maintain our security foundation. You'll be responsible for ensuring the security of our platform, protecting customer data, and establishing security practices that scale with our growth. This is a critical early security hire where you'll have significant impact and ownership.

Responsibilities:

• Conduct security audits, vulnerability assessments, and penetration testing across our infrastructure and applications.
• Implement and maintain security controls for our cloud infrastructure (AWS), databases, and data pipelines.
• Build security into our development lifecycle - review code, APIs, and new features for security implications.
• Monitor, detect, and respond to security incidents and vulnerabilities.
• Manage access controls, secrets management, authentication, and authorization systems.
• Drive compliance initiatives to meet enterprise customer requirements.
• Establish security best practices and educate the engineering team on secure development.
• Secure our API integrations and ensure safe handling of financial data and PII.

Requirements:

• 4+ years of experience in security engineering, preferably in B2B SaaS or fintech environments.
• Strong understanding of cloud security (AWS), infrastructure security, and application security.
• Experience with securing APIs, databases, and distributed systems.
• Knowledge of compliance frameworks (SOC 2 GDPR, ISO 27001).
• Hands-on experience with security tools for monitoring, scanning, and incident response.
• Ability to work autonomously and build security programs from the ground up.
• Strong communication skills to work across engineering and product teams.
• Experience with DevSecOps practices and CI/CD security.
• Knowledge of setup and tracking with Scurity Tools (MDM, agents, etc. ).

Nice to Have:

• Experience with billing/payment systems or financial data handling.
• Security certifications (CISSP, CEH, OSCP, or similar).
• Experience with data infrastructure.
• Background in building security for early-stage startups.