Senior Security Engineer

The role

A Senior Security Engineer will identify and address security vulnerabilities by reviewing platform and product code. You will conduct red team exercises and work with engineering teams to build secure systems.

What you will do

• Review platform and product code to identify security vulnerabilities and potential attack paths.
• Conduct red team exercises and penetration tests across applications and systems.
• Identify, investigate, and help remediate security vulnerabilities.
• Work closely with Product and Engineering teams to build and ship secure solutions.
• Review code and system designs from a security perspective.
• Write and contribute to internal tools, libraries, and automation.
• Continuously test internal and external applications for vulnerabilities.
• Educate engineering teams on secure coding and security practices.
• Stay current on the latest threats, vulnerabilities, and attack techniques.
• Assist with third-party application security reviews and penetration tests.

Required qualifications

• Strong software engineering experience with a background in security.
• Strong programming experience in one or more of Go, Rust, or Java.
• Professional experience working in security within a fintech, banking, payments, crypto, or similar financial technology environment.
• Hands-on experience with red teaming and penetration testing.
• Strong understanding of attacker tools, techniques, and how software vulnerabilities can be exploited.
• An adversary-first mindset when approaching software and system design.
• Ability to work independently and take ownership of security problems from identification through remediation.
• Strong communication skills to work effectively with engineers and explain security issues clearly.
• Curiosity and a desire to continuously learn and stay ahead of evolving security threats.

Nice to have

• Experience writing secure backend code in Go, Rust, or Java.
• Familiarity with authentication and authorization patterns such as OAuth2 and RBAC.
• General understanding of blockchain technologies and cryptocurrency systems and their security implications.
• Experience working in a fast-paced startup environment.

About the company

Pave Bank is the world’s first programmable business bank. It is built by the founders behind Monzo and BigPay.