[Remote] Security Engineer

Note: The job is a remote job and is open to candidates in USA. Snap Finance is a company that provides flexible financing solutions using data and machine learning. They are seeking a Senior Security Engineer to lead their Infrastructure Security Operations team, focusing on the security of their AWS environment and incident response.ResponsibilitiesOwn cloud security posture across multi-region AWS environments — continuously assess, harden, and improveOperate the full security toolset: CSPM, SIEM, vulnerability management, network security, ZTNA, DLP, EDR, and endpoint managementDrive the vulnerability management lifecycle end to end: scan cadence, prioritization, remediation SLAs, and reportingManage identity and access infrastructure in collaboration with IT, spanning MFA, IAM, IGA, privileged access, and credential managementLead the buildout of a Privileged Access Management (PAM) programSupport ongoing cloud migration security workstreamsMonitor threat intelligence and external attack surface signals; translate findings into prioritized actionServe as a primary responder for security incidents — triage, contain, eradicate, and recover with urgency and disciplineOwn incident response process maturity: playbook development, evidence chain of custody, forensic readiness, and post-incident reviewsBe available for occasional after-hours response when critical incidents ariseSet the coding and AI standard for the InfraSecOps team — write tools, automate workflows, and actively mentor peers in modern security engineering practicesBuild and maintain automation for alert triage, compliance evidence collection, asset inventory, and security metricsDevelop API integrations between security tools to eliminate manual handoffs and improve data fidelityContribute to security-as-code practices: IaC security reviews, CI/CD pipeline hardening, and software supply chain controlsChampion AI-native tooling across the team; evaluate and implement AI-assisted detection, threat hunting, and response capabilitiesBuild and contribute to Agentic AI frameworks within the security programStay current on AI security risks — prompt injection, model abuse, shadow AI — and turn awareness into practical controlsMaintain the security program roadmap and key results for your domain, including compliance attestation timelines and remediation SLA adherenceTrack and mature the security tool portfolio: monitor adoption, measure effectiveness, and drive continuous improvementMaintain risk registers and GRC platforms; ensure findings are triaged and resolved within SLACoordinate audit evidence collection for SOC 2 Type II, PCI DSS 4.0, and CyberEssentials+Contribute to executive and board-level security reporting — translate operational data into clear program narrativesDrive cross-functional follow-through with Engineering, IT, Data, and PMO on security workstreamsSkills5+ years in security engineering, security operations, or a combined SecOps/program roleMust be authorized to work in the United States and be US-basedHands-on experience operating cloud security tooling in AWS environmentsProficiency in at least one scripting or programming language — Python strongly preferredExperience building dashboards, writing queries, and tuning alerts in a SIEM platformStrong working knowledge of vulnerability management and incident response lifecyclesExperience supporting compliance frameworks: SOC 2, PCI DSS, or equivalentDemonstrated use of AI and ML tooling in a professional security contextTrack record of mentoring or upskilling peers in technical disciplinesStrong written communication skills — equally effective writing for engineers and executivesComfortable with occasional after-hours availability for critical security incidentsExperience with GRC platforms: compliance automation, risk management, or audit evidence toolingExposure to IGA and PAM concepts and toolingSecurity certifications: CISSP, CISM, AWS Security Specialty, or GIAC (GCIH, GCED, or similar)Background in fintech, lending, or regulated financial servicesContributions to security tooling, open-source projects, or internal platform engineeringExperience with SOAR platforms or automated response workflowsBenefitsGenerous paid time offCompetitive medical, dental & vision coverage401K with company match for USCompany-paid life insuranceCompany-paid short-term and long-term disabilityAccess to mental health and wellness resourcesCompany-paid volunteer time to do good in your communityLegal coverage and other supplemental optionsA value-based culture where growth opportunities are endlessCompany OverviewSnap Finance is a fintech company that specializes in providing consumer financing and lease-to-own purchase options. It was founded in 2012, and is headquartered in Salt Lake City, Utah, USA, with a workforce of 1001-5000 employees. Its website is http://snapfinance.com.