Senior Software Engineer, Security Platform

• Design, build, and operate security engineering services in Golang and Python on AWS and Kubernetes
• Maintain, harden, and retire existing security services
• Own the NATS event-driven platform, including contracts, consumers, delivery guarantees, and observability
• Integrate scanners, finding systems of record, tickets, and metrics
• Own security gates for SAST, SCA, secret detection, container, and IaC scanning
• Tune scanners, manage suppression workflows, reduce false positives, and roll out enforcing gates
• Build CI review agents, automated finding triage and verification, and remediation helpers
• Automate triage-to-remediation workflows and route findings to owning teams and vulnerability-management operations
• Participate in threat modeling and secure design reviews
• Participate in the on-call rotation
• Report to the Director of Information Security and collaborate with detection and response and network and zero trust engineers

• 6+ years of professional software engineering experience, including significant backend experience
• Deployed significant changes to a production application in the past 30 days
• Strong proficiency in Golang and working proficiency in Python
• Hands-on experience building and operating event-driven or message-based systems, such as NATS or Kafka
• Hands-on experience building and operating CI/CD pipeline tooling
• Hands-on web application security knowledge, including the OWASP Top 10
• Hands-on experience with SAST, SCA, and secret-scanning tooling
• Demonstrated AI-forward engineering experience using AI tooling and building adopted agentic workflows
• Working knowledge of AWS and Kubernetes
• Preferred: experience in fintech, payments, BNPL, or consumer lending
• Preferred: working knowledge of PCI DSS and SOC 2
• Preferred: software supply-chain integrity, including SBOM pipelines, dependency governance, artifact signing and provenance
• Preferred: familiarity with policy-as-code and admission control
• Preferred: exposure to bug bounty or external vulnerability report triage
• Preferred: experience with system-level threat modeling

• Fully remote work
• Work from anywhere
• AI-assisted engineering tools and workflows
• Open-source-focused technology environment