Software Engineer, Security

The role

This is a hands-on engineering role focused on security. You will build and ship changes to the application and infrastructure to own and scale the security of the platform.

What you will do

• Own Slash's security program end-to-end
• Work on network security including Cloudflare, AWS WAF, and VPC networking
• Work on application security by shipping features like passkey authentication and SMS rate limiting
• Manage recurring pen tests and the bug bounty program
• Coordinate remediation across engineering
• Assist on compliance efforts like PCI and SOC 2
• Establish security patterns, tooling, and guardrails
• Own corporate IT security for company equipment and endpoints
• Interface with customers, internal stakeholders, and key vendors

Required qualifications

• Experience building and shipping production software in TypeScript or another programming language
• Broad security knowledge across application code and infrastructure
• Ability to read, debug, and change the systems being secured
• Ability to independently identify security gaps and drive improvements to production
• Ability to coordinate pen tests and audits and manage competing security priorities

Benefits

• Opportunity for high growth
• High autonomy + ownership culture
• Comprehensive health + benefits plan
• Working out of our downtown San Francisco office space
• Unlimited PTO

About the company

Slash is building the future of business banking by creating financial infrastructure tailored to how businesses operate. Headquartered in San Francisco, it is a fast growing fintech that powers over ten billion dollars a year in business purchasing.