Defacto logo

RSSI — Security & Platform engineer

Defacto

Location TBDJobPosted 1mo agoStill listed 4 days ago

Evaluate my fit

Most applications go out cold — see where you stand first. No sign-up to start.

Watch jobs like this.

Don't just apply. Show up ready.

Olive works from this exact posting.

At a glance

Compensation
No compensation found
Location
Location TBD
Work Authorization
Not specified

Olive lists jobs from US employers, including remote roles you can work from the United States.

Job overview

Defacto is hiring a RSSI — Security & Platform engineer. Defacto is a regulated lending fintech building B2B financing, ISO 27001 certified, seeking an RSSI who owns security end‑to‑end, engineers solutions, and assists with SRE or developer‑experience tasks. The role involves leading security strategy, ensuring compliance with regulators and banks, and collaborating across fintech, supply‑chain, and AI teams.

Important skills include General Security, Other Engineering, SRE, User Experience, ISO/IEC 27001, and Security. Preferred (not required): Reliability Engineering and Developer Experience.

Skills & qualifications

RequiredNice to have

Skills

General SecurityOther EngineeringSREUser ExperienceISO/IEC 27001SecurityReliability EngineeringDeveloper Experience

Full job description

Welcome to Defacto!

We're a team of entrepreneurs. We lived and worked abroad. We launched previous startups. We have expertise in Fintech, Supply chain, Consulting, Marketing, Marketplaces, AI, ... And now, we're here to build the future of B2B financing. We're here to prevent SMBs from going bankrupt.

Defacto is a regulated lending fintech on its way to becoming a bank: we are applying for an ECS license (établissement de crédit spécialisé). And with our CORE offer, banks like Société Générale run entire business units on our platform — which raises security questions and challenges most startups never get to face. SMBs, partners and banks trust us with their money and their data. Security is not a checkbox for us — we're ISO 27001 certified and we intend to stay ahead of what regulators, banks and partners expect. We're looking for our RSSI: the owner of security end to end, who is still an engineer at heart — someone who ships, and who's happy to jump on SRE or developer-experience topics when that's the most useful thing to do.

What's in it for you?

Jobs to be done

Requirements

Please, if you feel that you don't check all the boxes, don't restraint yourself, we're still interested in what you have to offer !

Similar jobs, posted recently

Open roles like this one, listed in the last 30 days.

You've read the whole posting — now see how you match it.

Evaluate my fit