Senior Software Engineer, Security Platform

• Design, build, and operate security engineering services primarily in Golang and Python on AWS and Kubernetes
• Own the NATS event-driven platform, including contracts, consumers, delivery guarantees, and observability
• Integrate scanners, the finding system of record, tickets, and metrics
• Own delivery of SAST, SCA, secret detection, container, and IaC security gates
• Build agentic security workflows such as CI review agents, automated finding triage and verification, and remediation helpers
• Build triage-to-remediation automation, including reproduction context, fix guidance, and routing
• Participate in threat modeling and secure design reviews
• Participate in the on-call rotation for owned services
• Report to the Director of Information Security and collaborate with detection and response and network and zero trust engineers

• 6+ years of professional software engineering experience, including significant backend experience
• Deployed significant changes to a production application in the past 30 days
• Strong proficiency in Golang and working proficiency in Python
• Hands-on experience building and operating event-driven or message-based systems such as NATS or Kafka
• Hands-on experience building and operating CI/CD pipeline tooling
• Hands-on web application security knowledge, including the OWASP Top 10
• Hands-on experience with SAST, SCA, and secret-scanning tooling such as Semgrep, CodeQL, Snyk, Trivy, Grype, and gitleaks
• Demonstrated current use of AI tooling and experience building adopted agentic workflows
• Working knowledge of AWS and Kubernetes
• Preferred: experience in fintech, payments, BNPL, or consumer lending
• Preferred: working knowledge of PCI DSS and SOC 2
• Preferred: software supply-chain integrity, including SBOM pipelines, dependency governance, artifact signing, and provenance
• Preferred: familiarity with policy-as-code and admission control, including OPA, Kyverno, and conftest
• Preferred: exposure to bug bounty or external vulnerability report triage
• Preferred: experience with system-level threat modeling

• Fully remote work
• Opportunity to work from anywhere
• AI-assisted engineering tools and workflows
• Open-source-focused technology environment