Senior Security Engineer

🕒 March 2

🇺🇸 United States – Remote

💵 $170k - $300k / year

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 60%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Loancrate

WebsiteLinkedInAll Job Openings

11 - 50 employees

💳 Fintech

🤖 Artificial Intelligence

🤝 B2B

Fintech • Artificial Intelligence • B2B

Loancrate is a modern, easy-to-deploy Loan Origination System with built-in AI that works alongside your team to enhance efficiency. It automates document processing, organizes documents, creates dynamic to-do lists, and configures data checks to streamline operations and minimize manual tasks. By integrating advanced AI capabilities, Loancrate aims to revolutionize the way loan origination processes are managed, ensuring compliance and reducing errors across the workflow.

📋 Description

• Conduct comprehensive threat modeling of application and infrastructure layers and build remediation roadmaps • Harden AWS infrastructure, including IAM, secrets management, network segmentation, CloudTrail, GuardDuty, Security Hub, KMS, and DDoS protection • Integrate SAST, DAST, dependency scanning, container scanning, SBOM management, and secret detection into CI/CD • Lead and drive the company’s application security, cloud security, identity, and compliance posture • Perform vulnerability assessments and penetration testing and partner with engineering on remediation • Own the SOC 2 Type II program, including controls, evidence collection, auditor relationship, and continuous improvement • Lead or coordinate security incident response, runbooks, postmortems, and stakeholder communication • Establish and maintain a secure SDLC through design reviews, threat modeling, training, documentation, and examples • Maintain a risk register and track threat ownership and remediation status • Partner with Operations on endpoint and device security, including laptop hardening, MDM, hardware keys, and offboarding access revocation • Manage third-party and vendor security risk • Own identity and access infrastructure, including SSO, MFA, SCIM provisioning, and access reviews • Contribute to security documentation, internal runbooks, and team education

🎯 Requirements

• Deep application security experience: threat modeling, OWASP Top 10, secure code review, SAST/DAST tooling, and working directly with engineers to fix findings • Strong AWS security experience across IAM, VPC, GuardDuty, Security Hub, CloudTrail, KMS, Secrets Manager, and WAF • Terraform and/or Pulumi proficiency • Hands-on SOC 2 experience, including control design, evidence collection, and auditor relationship management • CI/CD security experience • Fintech or regulated industry experience • Identity and access experience: SSO/SAML, SCIM, MFA enforcement, hardware security keys, and access review programs • Familiarity with data security for sensitive personal and financial data, including encryption at rest and in transit, data classification, and minimization • Strong written communication • Scripting and automation skills using Python, Bash, or similar • Authorization to work in the United States

🏖️ Benefits

• Robust medical coverage (100% of employee + family premiums covered) • Vision & dental coverage • 401(k) • HSA / FSA • Remote-first culture - work from wherever you do your best work • Flexible time off - we trust you to manage your time