Senior Security Engineer
Senior
Application Security
Aws Cloud Security
Cloud Platforms
Cloud Security
Cybersecurity Operations
Data Security
Engineer
Facilities Management
Incident Management
Incident Response
Information Security
InfoSec
Pci
Risk Management
Security
Security Automation
Security Compliance
Security Operations
Security Standards
Security Testing
Software Security
Job Description
Finix Payments is looking for a Senior Security Engineer to strengthen security across its cloud and corporate environments. Based in San Francisco, CA (onsite), this role focuses on securing AWS and workstations, driving incident response, and building the security controls that support compliance and customer trust.
Working closely with engineering teams, you will help design and operationalize security for new capabilities, manage vulnerability and pentesting workflows, and take ownership of key parts of Finix’s PCI architecture. The position also includes safeguarding CI/CD pipelines and the software supply chain, along with establishing guardrails for internal AI tooling.
What you will do
- Partner with Engineering on secure design and implementation of new features
- Secure AWS infrastructure and workstations, and lead security incident response
- Coordinate pentests, vulnerability scanning, and a bug bounty program by triaging findings, leading fixes, and driving remediation with engineering
- Secure CI/CD pipelines and the software supply chain
- Own PCI architecture with engineering, including scoping, data handling, and a secure SDLC
- Support HSM operations, key exchanges, and key injections
- Build and maintain controls for PCI DSS, SOC 2, and other regulations
- Support audit fieldwork and customer security questionnaires
- Secure internal AI tooling and set guardrails for AI use across the company
What you bring
- 5+ years of security engineering experience, preferably in cloud-native fintech or payments
- Development experience in Java
- Strong AWS experience, including security services and infrastructure
- Hands-on vulnerability remediation experience
- Incident response experience
- Clear written and verbal communication, including presenting findings and recommendations to technical and non-technical audiences
- Working knowledge of PCI DSS and other regulatory frameworks
- Cryptography and key management experience
Technologies
- AWS
- Java
- AWS Security Specialty
- PCI DSS
- SOC 2
- HSM
- CI/CD
Level and compensation
- Level: IC4-IC5
- Location: San Francisco, CA (onsite)
- Compensation range: USD 180,000 - 240,000 per year + Equity + Benefits
Similar Jobs
S
