Senior Platform Security Engineer

This is a fully remote position, open to applicants in United States, +1 more country.

📋 Description

• Manage and operate the mutual-TLS certificate infrastructure for the onboarding of enterprise banks and product operations.

• Develop and uphold the security workflow for private network connections, which includes endpoint tenancy mapping and connection oversight.

• Administer the security for webhook delivery, which encompasses signing-secret rotation, client-certificate management, and response handling for delivery failures in outbound integrations.

• Lead the end-to-end process of vulnerability remediation, from application and infrastructure scanning to confirming closure.

• Establish and document secure-build standards for the engineering team.

• Enhance Spade’s security framework by collaborating with engineering, product, and go-to-market teams to provide value to both customers and internal stakeholders.

⛳️ Requirements

• A minimum of 6 years' experience in platform, infrastructure, or network security engineering, with direct oversight of production systems.

• Extensive expertise in PKI and certificate lifecycle management.

• Strong comprehension of TLS/mTLS.

• Practical experience with AWS networking and security.

• Familiarity with OAuth 2.0, including client-credentials flow and JWT validation.

• Awareness of certificate-bound token patterns.

• Proven experience in establishing security standards and collaborating with engineering teams for their implementation.

• Background in fintech or payments is preferred.

• Experience in integrating with bank or financial institution network edges is preferred.

• Familiarity with cloud infrastructure and tools such as AWS CDK is preferred.

• Preferred experience in implementing PCI DSS or SOC 2 technical controls.

• Prior experience working on a small or early-stage security team is preferred.

• Candidates must reside in the United States or Canada.

• Must clarify whether employment sponsorship will be required for the US or Canada.

🏝️ Benefits

• Significant equity with flexible early exercise options and extended post-termination options.

• 100% coverage of medical, mental, dental, and vision premiums for US-based employees.

• One Medical membership for US-based employees.

• 401(k) plan.

• 12 weeks of fully paid leave for parents welcoming a new child into their family.

• Unlimited paid time off (PTO).

• Remote work opportunities available in the US and Canada.

• Generous stipend for work-from-home expenses.

• Company-sponsored lunches.

• Citibike Membership.

• Hybrid and dog-friendly headquarters located in NYC.

• Competitive salary.