Senior Security Architect

Our ideal candidate will be responsible for spearheading Application and Cloud Security programs, fostering a collaborative environment between engineering, product, and compliance teams.

This leadership position demands the ability to drive a shift-left security culture, where secure design, development, and proactive detection are integral to our build, deploy, and delivery processes.

The successful candidate will possess 6+ years of experience in security engineering with a primary focus on application and cloud security, including proficiency in programming languages like Java, Python, JavaScript, and web technologies (e.g., HTML, CSS, SQL).

Key Responsibilities:

• Perform thorough security assessments across our application stack, including threat modeling, code reviews, dynamic scanning, and penetration testing.
• Develop and maintain secure SDLC practices, incorporating security checks into CI/CD pipelines.
• Cultivate secure design patterns, encompassing secure authentication, input validation, access control, session management, and secure storage.
• Continuously monitor and remediate vulnerabilities in source code and dependencies (SCA, SAST, DAST).
• Partner with engineering teams to establish and enforce coding standards aligned with OWASP and CWE guidelines.

Cloud & Infrastructure Security:

• Design and implement secure configurations for AWS environments, including networking, identity management (IAM), encryption, and logging.
• Implement and manage security services such as GuardDuty, Inspector, Security Hub, and other cloud-native tools.
• Define and enforce infrastructure-as-code (IaC) security controls using tools such as Terraform, CloudFormation, or policy-as-code frameworks (e.g., OPA, Sentinel).
• Lead efforts in runtime protection, including workload scanning, intrusion detection, and anomaly alerting.
• Ensure centralized, secure log collection, monitoring, and alerting across all infrastructure components.

Security Architecture & Best Practices:

• Champion a shift-left approach to security—collaborating with developers early in the SDLC and providing actionable feedback during design, build, and review phases.
• Collaborate with product managers and infrastructure leads to ensure security is embedded into architectural decisions, particularly for high-risk features or regulated workflows.
• Define and promote secure defaults, least-privilege access, and zero-trust architectural principles.
• Ensure strong key management and encryption standards are applied across data at rest, in transit, and in use.

Governance, Risk & Compliance:

• Support compliance initiatives by building and documenting enforceable security controls.
• Work with auditors and risk teams to demonstrate maturity of security processes and ongoing improvements.
• Establish internal security policies, operational procedures, and regular audit activities.

Requirements:

• Proficiency with programming languages like Java, Python, JavaScript, and web technologies (e.g., HTML, CSS, SQL).
• In-depth knowledge of application security vulnerabilities, threat modeling, and SDLC integrations.
• Deep familiarity with Cloud security architecture and services (AWS - IAM, VPC, KMS, GuardDuty, CloudTrail, etc.).
• Experience with DevSecOps tools and practices, including SAST, DAST, container scanning, and infrastructure scanning.
• Hands-on experience in implementing industry best practices in access control, encryption, and security observability.
• Excellent communication skills, with the ability to collaborate across engineering, product, and compliance teams.

What We Offer:

• A remote-first culture – Work from anywhere, with top-tier colleagues.
• Security is not a checkbox—it is fundamental to our success and product trust.
• You will be empowered to define best-in-class standards that scale across financial AI products, and dynamic customer environments.
• Be at the forefront of AI innovation – Build game-changing products that shape the financial industry.
• High ownership, high impact – Your work will define the future of banking.
• Comprehensive Benefits – We take care of our people.

---