Senior Security Engineer

About EarnIn As one of the first pioneers of earned wage access, our passion at EarnIn is building products that deliver real-time financial flexibility for those with the unique needs of living paycheck to paycheck. Our community members access their earnings as they earn them, with options to spend, save, and grow their money without mandatory fees, interest rates, or credit checks.

We’re fortunate to have an incredibly experienced leadership team, combined with world-class funding partners like A16Z, Matrix Partners, DST, Ribbit Capital, and a very healthy core business with a tremendous runway. We’re growing fast and are excited to continue bringing world-class talent onboard to help shape the next chapter of our growth journey.

POSITION SUMMARY

We are looking for a passionate Senior Security Engineer to drive security engineering efforts within our growing Information Security organization. As a Senior Professional, you will be critical to embedding security and implementing guardrails for the company's AI-first strategy. You will be expected to demonstrate advanced technical skills, create significant impact across the engineering org, and foster a collaborative environment. You should have hands-on experience securing modern cloud and enterprise environments, a natural sense of curiosity, and a diplomatic approach to problem-solving. This is a remote position, though it could also be a hybrid role from our Mexico City office as part of our expanding site. EarnIn offers excellent benefits for our employees, including healthcare, internet and cell phone reimbursement, a learning and development stipend, and potential opportunities to travel to our Mountain View headquarters. Our salary ranges are determined by role, level, and location.

WHAT YOU'LL DO

• Threat Management: Monitor active threats, perform in-depth analysis of AI-related attack vectors (e.g., prompt injection, model poisoning), and lead the development of comprehensive remediation plans.

• Infrastructure Security: Monitor, audit, detect, and remediate critical security exposures across our cloud infrastructure.

• Incident Response: Respond to security incidents and manage the end-to-end incident response lifecycle.

• Automation & Tooling: Implement advanced automation and AI agents for security tasks, including detection rule testing, auditing, metrics collection, and reporting to improve operational efficiency.

• Security Architecture: Work cross-functionally with engineering teams to architect secure, scalable solutions, including implementing security guardrails and governance for AI/ML workloads and evaluating third-party security tools.

• Mentorship & Expertise: Serve as a recognized security expert in multiple specialty areas and maintain strong awareness of the external threat landscape.

• Process Improvement: Drive the implementation of security, technical, and process improvements across the organization.

WHAT WE'RE LOOKING FOR

• Experience: At least 4+ years of industry experience in security engineering or a related field.

• AWS Expertise: Strong hands-on experience with AWS services (VPC, EC2, S3, EKS) and associated networking, IAM, and security controls in production environments.

• Containerization: Solid understanding of Docker and containerization, including building, optimizing, scanning, and securing container images and workflows.

• Kubernetes: Strong knowledge of Kubernetes architecture and experience operating or securing platforms like EKS in production.

• Infrastructure as Code (IaC): Proficiency with Terraform to provision and manage cloud infrastructure in a repeatable, scalable manner.

• Programming: Proficiency in at least one scripting or programming language, with a strong preference for Python to support security tooling and automation.

• Networking: Foundational knowledge of general networking concepts, including TCP/IP, DNS, routing, firewalls, and load balancing across cloud and containerized environments.

• Security Domain Depth: In-depth knowledge of Threat/Intrusion Detection, Vulnerability Management, and specialized expertise in securing AI agents, LLMs, and Model Context Protocol (MCP) environments.

• Education: MS or Bachelor’s degree in Computer Science or an equivalent field

• AI Experience: At least 6 months of experience using AI-assisted development tools (e.g., GitHub Copilot, Cursor, ChatGPT, or similar tools) as part of your software development workflow

• Compliance Frameworks: Familiarity with compliance standards such as ISO 27001, SOC2, NIST, SOX, and PCI is a plus

• Enterprise Solutions: Experience with IAM tools (Okta, OneLogin), Zero Trust architectures, and Data Loss Prevention (DLP) solutions is a plus

• Data Security: Experience with access control and PII management is a plus

• Industry Experience: Previous experience in the financial services industry is highly preferred

• SOAR: Experience with security orchestration, automation, and response (SOAR) technologies is a plus

#LI-Hybrid #LI-Remote

A Note on AI in the Hiring Process: EarnIn may use Artificial Intelligence (AI)-powered tools during the hiring process, including tools that generate summaries or notes for interviewers, review resumes, assist with scheduling, or help identify themes across candidate responses and profiles for a given role. Final hiring decisions are made by human interviewers and hiring managers. If you have any concerns about the use of AI in our hiring process, please connect with your recruiter. With your consent, EarnIn may use AI tools to help transcribe or summarize i nterviews. Recordings are treated as confidential candidate data and are accessible only to authorized hiring personnel. Declining to be recorded will not negatively affect your candidacy or evaluation.

At EarnIn, we believe that the best way to build a financial system that works for everyday people is by hiring a team that represents our diverse community. Our team is diverse not only in background and experience but also in perspective. We celebrate our diversity and strive to create a culture of belonging. EarnIn does not unlawfully discriminate based on race, color, religion, sex (including pregnancy, childbirth, breastfeeding, or related medical conditions), gender identity, gender expression, national origin, ancestry, citizenship, age, physical or mental disability, legally protected medical condition, family care status, military or veteran status, marital status, registered domestic partner status, sexual orientation, genetic information, or any other basis protected by local, state, or federal laws. EarnIn is an E-Verify participant.

EarnIn does not accept unsolicited resumes from individual recruiters or third-party recruiting agencies in response to job postings. No fee will be paid to third parties who submit unsolicited candidates directly to our hiring managers or HR team.