Security Engineer

Bettermoney
New York, NY

Who this role is best for

Geared toward mid-level security engineers comfortable with building security programs from scratch in regulated financial environments, ideally based in New York City.

Best fit for

  • Security engineers with payments or banking compliance experience will thrive here.
    — “5+ years of experience in security engineering, with meaningful time at a payments company, bank, or other regulated financial institution.”
  • Candidates who can both design security systems and implement them in code.
    — “Ship internal security tooling and features. We need someone who can build, not just advise.”
  • Those who view ambiguity as a chance to define security standards.
    — “You view a lack of specificity as an opportunity for ownership.”

Things to consider

  • Relocation or NYC residency is mandatory for this position.
    — “Based in New York City (or willing to relocate).”
  • Expect to hire and manage contractors as the security team expands.
    — “Hire, manage, and supervise specialist contractors or future security hires as the team grows.”

How to stand out

  • Showcase specific instances where you built security tooling from scratch.
    — “You can write production code, not just review it.”
  • Highlight experience with SOC 2 or PCI-DSS compliance in past roles.
    — “Familiarity with compliance frameworks relevant to payments and banking (SOC 2, PCI-DSS, state money transmission, etc.).”
  • Demonstrate how you embedded security early in development lifecycles.
    — “Work closely with engineering to embed security into our development lifecycle from the start.”
Pace · SteadyCollaboration · HighAutonomy · MediumDecision Impact · CompanyLevel · Senior

Derived from job-description analysis by Serendipath's career intelligence engine.

What success looks like

  • secure systems
  • compliance with regulations
Typical background
5+ years in security engineering

Skills & requirements

Required

Security EngineeringCloud EnvironmentsInfrastructure As CodeApplication SecurityOperational SecurityCompliance Frameworks

Preferred

Building Security ProgramsInternal Security Tooling

Stack & domain

Security EngineeringCloud EnvironmentsInfrastructure As CodeCode ReviewsThreat ModelingPenetration TestingSecurity ControlsMonitoringIncident ResponseSecurity PoliciesCompliance FrameworksInternal Security ToolingProduction CodingSecurity ProgramsRegulated Financial InstitutionsPayment SystemsSecurity FeaturesSecurity LifecycleLeadershipCommunicationProblem SolvingTeamworkStrategic ThinkingCustomer ServiceNegotiationProject ManagementAccount ManagementOwnershipUrgencyAccountabilityTrust BuildingCollaborationOptimismFinanceTechnology

About the role

Original posting from Bettermoney via Ashby

TL;DR

We sell trust, and security is core to that promise. We're looking for someone to lead how we think about code and operational security as we scale. You'll help design the systems, practices, and safeguards that enable us to grow without compromising on that trust.

About us

We believe stablecoins are better money and will be the backbone of better payments. We see key structural problems hindering stablecoin adoption, and we’re going to fix them – starting with building a clearinghouse. We’re a small, scrappy team based in NYC, we’ve raised $10M from a16z crypto and other excellent partners, and we’re going to bring better money to the world.

What you'll do:

  • Own our security posture across application security, infrastructure security, and operational security.
  • Conduct code reviews, threat modeling, and penetration testing to identify and remediate vulnerabilities.
  • Design and implement security controls, monitoring, and incident response processes appropriate for a regulated payments environment.
  • Establish security policies, procedures, and compliance frameworks (SOC 2, PCI-DSS, etc.) as we scale.
  • Hire, manage, and supervise specialist contractors or future security hires as the team grows.
  • Ship internal security tooling and features. We need someone who can build, not just advise.
  • Work closely with engineering to embed security into our development lifecycle from the start.

What We're Looking For:

  • 5+ years of experience in security engineering, with meaningful time at a payments company, bank, or other regulated financial institution.
  • Experience with cloud environments (GCP) and infrastructure as code providers (Terraform).
  • Breadth across both application/code security and operational security. You don't need to be the world's deepest expert in both, but you need to be knowledgeable in each and capable of hiring and managing those who are.
  • You can write production code, not just review it. Ideally you've shipped internal tools or security features yourself.
  • Experience building security programs at early-stage or high-growth companies, ideally from scratch.
  • Familiarity with compliance frameworks relevant to payments and banking (SOC 2, PCI-DSS, state money transmission, etc.).
  • You view a lack of specificity as an opportunity for ownership.
  • Based in New York City (or willing to relocate).

Our Values

  • Be offended by the status quo - a payment taking 3 days and costing 3% is offensive. Every day that people interact with legacy financial infrastructure costs humanity time and money. Bring the future forward with righteous indignation.
  • Be all over it - operate with extreme urgency and accountability. Know the numbers, meet the right people, answer every email, go the extra mile. Ask yourself: can it be done today?
  • We sell trust - trust is easy to lose. Security and integrity are our foundation. Use every interaction and every product as an opportunity to build trust. This is non-negotiable.
  • Do the dishes - we are all owners. Put ego aside and get shit done.
  • Be the glue - pick each other up and make each other better. Be direct, be helpful, and assume positive intent. Win as a team.
  • We enjoy the crucible! We are on a mission to change money. It takes a lot of optimism to attack such an ambitious goal. Our opportunity is a privilege and we don’t forget that. Especially when the journey is hard.

If these values speak to you, come talk to us!

Benefits:

We're playing the long-game. We think you should too. This means investing in our employees. We offer comprehensive (and growing) benefits, including:

  • Competitive salary and equity
  • Comprehensive insurance (medical/dental/vision)
  • Unlimited vacation: Take time when you need it
  • Periodic off-sites
  • Daily lunch provided

Equal Opportunity Employment:

The Better Money Company is an equal opportunity employer. We are looking for the best!

Source: Bettermoney careers (Ashby)

Similar roles

More roles at Bettermoney