Senior Software Engineer - Security

The role

You will lead and drive security posture across application security, cloud security, identity, and compliance. You will build systems, guardrails, and tooling to catch issues early and improve secure defaults.

What you will do

• Lead and drive Loancrate's security posture across application security, cloud security, identity, and compliance
• Perform regular threat modeling, vulnerability assessments, and penetration testing
• Build and maintain security tooling and automation integrated into CI/CD
• Harden AWS environment including IAM, VPC, secrets management, and audit logging
• Own the SOC 2 Type II program and manage auditor relationships
• Lead or coordinate incident response for security events
• Establish and maintain a secure SDLC
• Maintain a risk register
• Partner with Operations on endpoint and device security
• Manage third-party and vendor security risk

Required qualifications

• Deep application security experience
• Strong AWS security experience
• Terraform and/or Pulumi proficiency
• Hands-on SOC 2 experience
• CI/CD security experience
• Fintech or regulated industry experience
• Collaborative mindset
• Identity and access experience
• Familiarity with data security for sensitive personal and financial data
• Strong written communication
• Scripting and automation chops (Python, Bash, or similar)

Benefits

• Robust medical coverage (100% of employee + family premiums covered)
• Vision & dental coverage
• 401(k)
• HSA / FSA
• Remote-first culture
• Flexible time off

About the company

Loancrate builds AI-native tooling to automate mortgage workflows. Their remote team has enabled customers to power over $85 billion in new home loans since starting in 2020.