Member of Technical Staff, Security Engineer

Job Description

Job DescriptionAbout the Role

This is a founding security engineering role at a fast-moving fintech startup, giving you end-to-end ownership of infrastructure, application, and identity security across the organization. You'll set the security posture from the ground up — building programs that make the secure path the easy path, not a bottleneck — at a company where security is central to earning client and partner trust.

What You'll Do

• Own infrastructure security across the full AWS environment, including VPC/VPN peering, network segmentation, IAM, and secrets management.

• Lead application security for web and desktop clients, embedding threat modeling, supply-chain controls, and secure code review into the development lifecycle.

• Design and implement identity and access controls (SSO, RBAC, least-privilege) for both human users and AI/agent systems.

• Build audit trails and access controls that make autonomous agent activity fully reconstructable — what happened, on whose behalf, with what data, and why.

• Partner with the IT managed service provider to secure endpoints, devices, and access for the in-office team.

• Stand up and run compliance, auditability, bug bounty, VDP, and pentest programs that demonstrate security posture to clients, partners, and auditors.

What We're Looking For

• 3+ years of hands-on security engineering or infrastructure security experience, with a strong track record in AWS (VPC, IAM, secrets management, network segmentation).

• Practical application security experience: threat modeling, dependency/supply-chain controls, and secure code review.

• Prior experience as a first or sole security hire at a startup, building programs from scratch with high autonomy.

• Identity and access management implementation across both human and non-human (e.g. service, agent) actors.

• Endpoint security and device management experience in an IT security context.

• Compliance and auditability program experience (SOC 2, vulnerability management, pentest coordination).

• Comfort operating in fast-moving environments with broad ownership and minimal established process.

• Familiarity with Kubernetes is a plus.

• Background in financial services or other regulated industries is a plus.

• Experience securing AI or autonomous agent systems is a plus.

Compensation & Benefits

Base salary: $150,000 – $250,000 USD annually. Visa sponsorship is not available for this role.

Location

On-site in Los Angeles, CA. Candidates based in New York City, NY or San Francisco, CA may also be considered.