Senior Software Engineer, Security
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Security engineer building automated application and infrastructure security for Flex’s AI-native private bank. Protecting money movement, cloud access, vulnerability management, and secure development at scale.
Responsibilities:
- Report directly to the CTO and set Flex’s security standard
- Threat model money movement paths including the ledger and write path, card issuing, payouts, and stablecoin systems
- Participate in design reviews for anything that touches money and continuously assess existing systems
- Build secure-by-default infrastructure, including IaC guardrails, CI/CD supply-chain integrity, secrets handling, service isolation, and workload IAM
- Build a just-in-time, least-privilege cloud access system
- Own application security across new and existing systems
- Build automated checks and secure defaults into the development lifecycle
- Perform high-risk code reviews, dependency and SBOM hygiene, and effective static and dynamic analysis
- Eliminate vulnerability classes through automation
- Build tooling and golden paths that keep sensitive data out of logs
- Run the vulnerability disclosure program end to end and grow it into a bug bounty program
- Scope and manage external penetration tests and drive remediation
- Build security automation, including AI-assisted triage and review
- Partner with Engineering, IT and Corporate Engineering, Risk, and Compliance on security reviews and audits
Requirements:
- Strong software engineer with security expertise; comfortable in the normal engineering interview loop
- Substantial hands-on experience building or securing systems in a fast-moving environment, including a period as the most senior person doing this work
- Real software engineering ability in Python, Go, TypeScript, or similar; not scripting alone
- Hands-on AWS or GCP cloud infrastructure experience
- Hands-on Terraform or equivalent Infrastructure as Code experience
- Experience with containers and CI/CD pipelines that you have changed, not only used
- Practical threat modeling on systems with real consequences
- Experience with secrets management, workload identity, and service-to-service authorization
- Experience handling inbound vulnerability reports, including at least one difficult reporter
- Clear written communication and a bias toward writing things down
- Experience shipping a security tool or control that engineers adopted
- Ability to make risk-based security decisions and identify trust boundaries
- Strongly preferred: platform, infrastructure, or DevOps background moved toward security
- Strongly preferred: small-company or founder experience
- Strongly preferred: experience running a VDP or bug bounty program, including triage
- Strongly preferred: fintech, payments, or regulated-environment experience
- Strongly preferred: production experience applying AI or LLM tooling to security work
- OSCP or OSWE certifications are welcomed but do not substitute for an engineering track record
Benefits:
- Meaningful equity if you help build something big
- Founder-level exposure with direct access to leadership, customers, and investors
- Small teams, high trust, and real accountability
- Professional opportunity to work on AI, underwriting, compliance, payments, credit, and banking at scale
Similar Jobs
Senior Manager, Global Security Technology
Global Security Technology leader shaping strategy, platforms, and modernization. Managing enterprise security projects, vendors, budgets, and global capability delivery for Johnson & Johnson healthcare operations.
Industry Sales Director – Security, Surveillance & Video Connectivity
Industry Sales Director driving enterprise sales, account expansion, and partner growth for Webbing’s global cellular connectivity platform. Owning the Security & Video vertical worldwide.
Senior Information Security Engineer
Senior Security Engineer owning KPA’s enterprise security platforms, cloud, identity, and automation. Improving security across workplace-safety software, infrastructure, DevOps, and compliance environments.
Chief Information Security Officer – CISO
CISO leading cybersecurity strategy, operations, risk, and resilience for Sydney Airport’s critical aviation infrastructure. Advising executives and the Board while developing high-performing security teams.
Information Security Program Manager
Information security program manager managing U.S. customer portfolios for Cofense, a phishing defense company. Delivering simulated phishing programs, remediation reporting, and security guidance.
Head of IT, Security
Head of IT and Security owning identity, compliance, IT, and application security. Protecting OpenEd’s education platform and data for over 100,000 students.
Information Security Specialist – SoD Governance, Segregation of Duties
Especialista em segurança da informação governando SoD, IAM e RBAC na Avvale. Mitigação de riscos de acesso e conformidade para soluções empresariais inovadoras e sustentáveis.
Principal Security Engineer
Principal Security Engineer governing Fortive’s multi-cloud, AI, GitHub, and security architecture. Advising executives and leading enterprise technology strategy, governance, security, and modernization.
Security Engineering Lead
Security Engineering Lead building Product Security for Attio’s AI-native CRM. Securing customer data, leading incident response, and hiring the security team.
Security Engineering Lead
Security Engineering Lead building Attio’s Product Security function for its AI-native CRM platform. Leading application security, incident response, and security team growth.
Senior Cloud Security Engineer
Senior Cloud Security Engineer securing Omilia’s AWS conversational AI platform. Automating Terraform, GitOps, CI/CD, and cloud compliance across distributed engineering teams.
Consultor Sailpoint ISC – Identity Security Cloud
Consultor SailPoint ISC en Devoteam, consultora europea de estrategia digital y ciberseguridad. Despliegue, integración y evolución de soluciones Cyber IAM para clientes.
Senior Security Engineer – AI Focus
Senior Security Engineer securing AI/ML systems for Euna Solutions, a cloud-based public-sector software provider. Driving AI security, automation, governance, and compliance across the development lifecycle.
Senior Security Engineer – AI Focus
Senior Security Engineer securing AI/ML systems at Euna Solutions, a cloud software provider for public-sector organizations. Driving AI security automation, governance, compliance, and secure development practices.
R&D Cybersecurity Engineer
Sentar cybersecurity engineer supporting DLA research and development efforts. Administering Okta infrastructure, operational systems, networking, automation, maintenance, and user support.
Visiting Professor, Cybersecurity
Online cybersecurity professor teaching undergraduate and graduate students at DeVry University. Developing course materials, assessing learning, and integrating responsible AI and applied security practices.
Principal Information Security Engineer
Principal Information Security Engineer securing ASRC Federal’s DSOP platform for the U.S. Department of Defense. Assessing Kubernetes and containers, managing vulnerabilities, and integrating zero-trust controls across DevSecOps environments.
Cyber Security Engineer
Cyber Security Engineer building automated security capabilities for Interact’s enterprise intranet platform. Improving Splunk, cloud controls, and incident response through engineering and automation.
IT Cybersecurity Auditor
Cybersecurity Auditor conducting risk-based IT, security, and compliance audits for DiXiO, a global SWIFT financial messaging expert network. Assessing controls and reporting findings to clients.
IT Security Engineer
IT Security Engineer safeguarding sensitive healthcare information for Legacy Community Health, a Southeast Texas federally qualified health center. Monitoring threats, assessing risks, and strengthening Microsoft cloud and infrastructure security.