Modern Treasury
Software Engineer - Security
San Francisco
Work authorization requiredDetected 55 days ago
JavaScriptRubyReactCSSTailwind CSSRailsFull-Stack DevelopmentCode ReviewPostgreSQLAWSDockerCI/CDDevOpsGraphQLCybersecurityPenetration TestingIncident ResponseCompliance
About the role
- This position can be based out of San Francisco, New York, or remote (we accept candidates from the following states: AZ, CA, CO, CT, FL, GA, HI, IL, MA, MI, MN, MT, NC, NJ, NV, NY, OH, OK, OR, PA, TN, TX, UT, WA, WI).
- This role is hands-on security engineering with heavy focus on automation.
Responsibilities
- Lead application security across our payment platform, including secure code review, threat modeling, and security architecture for new products
- Own product security for new payment rails, including FBO account structures, stablecoin integration, and enhanced compliance features
- Design and implement DevSecOps tooling and automation to improve security posture across CI/CD and infrastructure
- Partner with engineering teams to embed security into the development lifecycle through automation, secure design patterns, and security champions
- Drive security architecture decisions for customer-facing APIs, authentication systems, and data protection controls
- Build monitoring and detection capabilities for application-layer threats, API abuse, and fraud patterns
- Design infrastructure monitoring, automation, and remediation practices that keep our systems resilient and trustworthy
- Compliance on the ownership and operation of SOC 2 controls, ensuring the systems you build map cleanly to control requirements and produce the evidence those controls depend on
- Coordinate with our independent external penetration testing provider to scope, schedule, and run the testing that satisfies our SOC 1, SOC 2, and PCI DSS requirements, and drive remediation of findings to closure
- Own vulnerability management across our applications and infrastructure, triaging and prioritizing findings, partnering with engineering on remediation, and tracking closure within the timelines our policies and compliance programs require
Requirements
- 6+ years in security engineering, with 3+ years focused on application and product security
- Strong experience with:
- Experience with payment processing security across ACH, wires, card networks, and emerging rails
- Experience integrating security into DevOps workflows (e.g., Buildkite, IaC, AWS security automation)
- Experience with stablecoin security, blockchain integrations, or crypto payment rails
- Track record of balancing pragmatic risk management with business velocity
Nice to have
- Full-stack application security (frontend, backend, APIs)
- Authentication and authorization systems and identity management
- Infrastructure automation related to security (AWS, Docker, CI/CD pipelines)
- Fraud detection, prevention, and abuse mitigation in payment or financial products
- Secure SDLC practices and developer security tooling
- Experience with incident response and security monitoring
- Knowledge and experience with application security for Ruby on Rails, GraphQL, JavaScript, React, and containerized environments
- Payments engineering experience, ideally including fraud prevention and risk controls in money movement systems
Skills
- AZ, CA, CO, CT, FL, GA, HI, IL, MA, MI, MN, MT, NC, NJ, NV, NY, OH, OK, OR, PA, TN, TX, UT, WA, WI).
- Modern Treasury is expanding deeper into money movement.
Company info
- Serve as the technical owner for the security controls and automated tests that evidence the systems you build in our GRC platform (Vanta), partnering with engineering teams to keep them accurate and audit-ready as part of our SOC 2, SOC 1, and PCI DSS programs
Visa & Work Authorization
- Modern Treasury participates in E-Verify and will provide the federal government with your Form I-9 information to confirm that you are authorized to work in the U.S.
Apply directly at Modern Treasury →Create a free account for alerts like thisView Modern Treasury immigration profile
This listing is sourced directly from Modern Treasury's careers page and normalized into a canonical job model.