Lead Security Engineer
Remote
Full Time
#Engineering
#Fintech
#Security
#Incident Response
#Risk Management
#GCP Security
#DevSecOps
#ISO 27001
#SOC2
At Finary, we are on a mission to reshape how individuals interact with their finances. Since our launch in 2021, we have built a comprehensive investing platform that now supports over 600,000 users in tracking assets, managing budgets, and growing their wealth. We are backed by world-class investors like PayPal Ventures and Y Combinator, and we recently secured 25M€ in Series B funding to accelerate our growth. We pride ourselves on shipping high-performance, delightful products, and we are looking for ambitious people who want to help us revolutionize an industry that affects everyone.
About the Role
We are seeking a Lead Security Engineer to join us on a full-time basis. In this role, you will take full ownership of our security strategy, acting as the primary lead for our infrastructure, application security, and risk management efforts. You will work closely with our leadership team, including the VP of Engineering, to ensure our platform remains secure as we scale. This is a high-impact position where you will define our security roadmap and foster a culture of safety across the entire organization.
Key Responsibilities
- Develop and execute a comprehensive security strategy, including infrastructure protection, application security, and incident response.
- Collaborate cross-functionally with Engineering, Product, and Compliance teams to implement scalable security processes and ensure we meet financial-grade standards like ISO 27001 and SOC2.
- Lead critical initiatives to mature our security posture, specifically focusing on GCP security, DevSecOps practices, and risk management.
Requirements
We are looking for a hands-on leader who thrives in a high-growth environment. You should have a proven track record in security engineering, ideally within a startup or scale-up setting. Key qualifications include:
- Extensive experience in incident detection and response and maturing existing security programs.
- Strong technical proficiency in GCP security, including IAM and network security.
- Excellent communication skills with the ability to lead cross-functional projects and educate team members on security best practices.
- A proactive mindset with the ability to take ownership and maintain composure under pressure.
- Familiarity with DevSecOps, ISO 27001, and SOC2 frameworks is highly valued.
Location
This position is remote, allowing you to work from anywhere.
Compensation and Benefits
We believe in rewarding impact and talent. While we focus on providing a high-performance environment with A-players, we offer the following benefit:
- Remote work flexibility.
