Overview
About Finix
Full job description
About Finix Finix is building the global operating system for fintech, starting with payments. From startups to publicly traded companies, Finix processes tens of billions of dollars annually both in-store and online. Finix was founded in 2015 and is headquartered in San Francisco.
To date Finix has raised over $200M, including a $75M Series C led by Acrew Capital and Lightspeed Venture Partners and backed by American Express Ventures, Bain Capital Ventures, Homebrew, Inspired Capital, Visa, and others
About the Role:
The Engineering organization at Finix owns the delivery and stability of our product end-to-end. As a Security Engineer, you will be responsible for the secure design, implementation, and operation of Finix’s cloud and corporate environments. You will work closely with Engineering, Information Security, Compliance, and IT.
This is an in-office position based in our San Francisco office.
Partner with Engineering on secure design and implementation of new features Secure our AWS infrastructure and workstations, and lead security incident response Coordinate pentests, vulnerability scanning, and the bug bounty program: triage findings, lead fixes, and drive remediation with engineering Secure our CI/CD pipelines and software supply chain Own PCI architecture with engineering, including scoping, data handling, and secure SDLC Support HSM operations, key exchanges, and key injections Build and maintain controls for PCI DSS, SOC 2, and other regulations Support audit fieldwork and customer security questionnaires Secure internal AI tooling and set guardrails for AI use across the company
5+ years in security engineering, preferably in cloud-native fintech or payments Development experience in Java Strong AWS experience, including security services and infrastructure Hands-on vulnerability remediation experience Incident response experience Clear written and verbal communication, including presenting findings and recommendations to technical and non-technical audiences Working knowledge of PCI DSS and other regulatory frameworks Cryptography and key management experience
AWS Security Specialty, CISSP, or similar certification Bug bounty and hands-on pentest experience CI/CD pipeline experience Infrastructure as code experience (Terraform) Experience with IAM and identity providers such as Okta Experience with CrowdStrike, Palo Alto Prisma Access, or Sonatype Nexus
Tips for this job
Practical JobOpportunity guidance. These tips do not replace official rules or create new eligibility requirements.
- Tailor the CV and application to the responsibilities and required skills stated on the official employer page.
- Use concrete evidence of relevant work, projects and measurable results rather than generic claims.
- Confirm location, work authorization, remote restrictions and sponsorship terms before applying.
- Apply through the original employer or official recruitment destination shown on this page.
JobOpportunity.info helps you discover and organize source listings. Confirm eligibility, dates, salary/funding and application instructions on the original source before submitting anything.
Apply through JobOpportunity →