Senior Security Engineer

Sobre el puesto

<div class="content-intro"><h3><strong>About EarnIn</strong></h3> <p>As one of the first pioneers of earned wage access, our passion at EarnIn is building products that deliver real-time financial flexibility for those with the unique needs of living paycheck to paycheck. Our community members access their earnings as they earn them, with options to spend, save, and grow their money without mandatory fees, interest rates, or credit checks.</p> <p>We’re fortunate to have an incredibly experienced leadership team, combined with world-class funding partners like A16Z, Matrix Partners, DST, Ribbit Capital, and a very healthy core business with a tremendous runway. We’re growing fast and are excited to continue bringing world-class talent onboard to help shape the next chapter of our growth journey.</p></div><p><strong>POSITION SUMMARY </strong></p> <div> <p>We are looking for a passionate Senior Security Engineer to drive security engineering efforts within our growing Information Security organization. As a Senior Professional, you will be critical to embedding security and implementing guardrails for the company's AI-first strategy. You will be expected to demonstrate advanced technical skills, create significant impact across the engineering org, and foster a collaborative environment. You should have hands-on experience securing modern cloud and enterprise environments, a natural sense of curiosity, and a diplomatic approach to problem-solving. This is a remote position, though it could also be a hybrid role from our Mexico City office as part of our expanding site. <span style="font-weight: 400;">EarnIn offers excellent benefits for our employees, including healthcare, internet and cell phone reimbursement, a learning and development stipend, and potential opportunities to travel to our Mountain View headquarters. Our salary ranges are determined by role, level, and location.</span> </p> <p><strong>WHAT YOU'LL DO </strong></p> <ul> <li><strong>Threat Management:</strong> Monitor active threats, perform in-depth analysis of AI-related attack vectors (e.g., prompt injection, model poisoning), and lead the development of comprehensive remediation plans.</li> <li><strong>Infrastructure Security:</strong> Monitor, audit, detect, and remediate critical security exposures across our cloud infrastructure.</li> <li><strong>Incident Response:</strong> Respond to security incidents and manage the end-to-end incident response lifecycle.</li> <li><strong>Automation & Tooling:</strong> Implement advanced automation and AI agents for security tasks, including detection rule testing, auditing, metrics collection, and reporting to improve operational efficiency.</li> <li><strong>Security Architecture:</strong> Work cross-functionally with engineering teams to architect secure, scalable solutions, including implementing security guardrails and governance for AI/ML workloads and evaluating third-party security tools.</li> <li><strong>Mentorship & Expertise:</strong> Serve as a recognized security expert in multiple specialty areas and maintain strong awareness of the external threat landscape.</li> <li><span style=" margin: 0px; padding: 0px;"><strong>Process Improvement:</strong> Drive the implementation of security, technical, and process improvements across the organization.</span></li> </ul> <p><strong><span style=" margin: 0px; padding: 0px;">WHAT WE'RE LOOKING FOR </span></strong></p> <ul> <li><strong>Experience:</strong> At least 4+ years of industry experience in security engineering or a related field.</li> <li><strong>AWS Expertise:</strong> Strong hands-on experience with AWS services (VPC, EC2, S3, EKS) and associated networking, IAM, and security controls in production environments.</li> <li><strong>Containerization:</strong> Solid understanding of Docker and containerization, including building, optimizing, scanning, and securing container images and workflows.</li> <li><strong>Kubernetes:</strong> Strong knowledge of Kubernetes architecture and experience operating or securing platforms like EKS in production.</li> <li><strong>Infrastructure as Code (IaC):</strong> Proficiency with Terraform to provision and manage cloud infrastructure in a repeatable, scalable manner.</li> <li><strong>Programming:</strong> Proficiency in at least one scripting or programming language, with a strong preference for Python to support security tooling and automation.</li> <li><strong>Networking:</strong> Foundational knowledge of general networking concepts, including TCP/IP, DNS, routing, firewalls, and load balancing across cloud and containerized environments.</li> <li><strong>Security Domain Depth:</strong> In-depth knowledge of Threat/Intrusion Detection, Vulnerability Management, and specialized expertise in securing AI agents, LLMs, and Model Context Protocol (MCP) environments.</li> <li><strong>Education:</strong> MS or Bachelor’s degree in Computer Science or an equivalent field</li> <li><strong>AI Experience: </strong>At least 6 months of experience using AI-assisted development tools (e.g., GitHub Copilot, Cursor, ChatGPT, or similar tools) as part of your software development workflow</li> <li><strong>Compliance Frameworks:</strong> Familiarity with compliance…