JOB-1508
Our client is a fast-growing fintech startup, currently at Series A, that builds AI agents for the regulated banking world. It is hiring a hands-on application security engineer to run and mature an existing security program, with room to grow into technical leadership.
The work
- Run and mature the AppSec program, creating tools, processes and secure development lifecycle practices that blend into engineers’ daily delivery
- Secure the surface where AI agents execute, partnering with engineers on secure design for agent workflows, data privacy and AI-specific vulnerabilities
- Automate security operations, such as detection pipelines and vulnerability management, to cut manual effort
- Act as lead incident commander and convert every incident into lasting improvements
- Help meet SOC 2 and ISO 27001 obligations as well as security demands from banking partners, as a secondary part of the job
About you
- Four to eight years in application or product security as your main job, including secure code review, threat modeling and building tools that engineers use
- Recent time at a venture-backed startup or hypergrowth company
- A hands-on individual contributor who writes code, not a manager only
- Technical bachelor’s degree; strong cloud security fundamentals are a plus
- Fintech or regulated B2B SaaS background and experience building a security program from scratch are helpful
On-site in the San Francisco Bay Area. Visa transfers considered.
