Coinflow

2 months ago

Security Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 4 hours agoStatus: Live

Job Summary

Security Engineer to own Coinflow’s defensive and offensive security posture. You’ll build the SecOps backbone, perform internal pentests, manage vulnerabilities and dependencies, shape the Secure Development Lifecycle, and partner with compliance to provide evidence for PCI DSS, SOC 2, ISO 27001, and DORA. You’ll work with AI-native security tooling (Claude) and influence engineering across the SDLC.

Location: Chicago

Workplace: Onsite

Employment Type: Full time

Job Function: Cybersecurity

Key Responsibilities

•SIEM & SecOps Dashboard: Stand up and operate our SIEM. Build out the SecOps dashboard that gives engineering, compliance, and leadership a real-time picture of our security posture — alerts, anomalies, auth events, infrastructure changes, and audit-ready evidence in one place.
•Internal Penetration Testing: Run continuous internal pentests against Coinflow services, APIs, infrastructure, and embedded SDKs. Use Claude Security and Claude Code to scale your coverage — automate reconnaissance, fuzzing, code review, and exploit development. Document findings, drive remediation, and measure mean-time-to-fix.
•Vulnerability & Dependency Management: Own the vulnerability lifecycle end-to-end. Triage CVEs across our npm, cargo, and other ecosystems. Build the automation that keeps packages patched without breaking production — including Dependabot tuning, lockfile hygiene, and gated auto-merge for low-risk upgrades.
•Secure Development Lifecycle: Monitor and improve how we ship code. Define secure-by-default patterns for new services, review threat models for high-risk changes, integrate SAST/DAST/secret scanning into CI, and make the secure path the fast path for engineers.
•Compliance Partnership: Work alongside our compliance function to produce the evidence, controls, and monitoring artifacts that PCI DSS, SOC 2, ISO 27001, and DORA auditors need — without turning engineering into a paperwork shop.

Pay and Benefits

Salary: USD 145,000 - 195,000 annually

Equity and Bonus:Equity

Perks:Health Insurance401kWellness Stipend

Key Requirements

•4+ years in a security engineering, product security, or DevSecOps role, ideally at a fintech, payments company, or other regulated environment
•Strong hands-on offensive skills — you've broken real systems, not just run scanners
•Production experience operating a SIEM (Datadog, Splunk, Elastic, Panther, or similar) and building dashboards that engineers actually use
•Fluency in TypeScript/Node and at least passing comfort with Rust, Go, or Python — enough to read our code, find bugs in it, and write the tooling to find more
•Experience with vulnerability management at scale: CVE triage, SCA tooling, dependency upgrade automation

Experience:4+ yearsFintechPaymentsSecurity

Skills:TypeScriptNode.jsRustGoPythonCloudWeb securityPentestingCI/CDSASTDASTSecret scanningVulnerability managementDatadogSplunkElasticPanther

Languages:English

Tech Stack:TypeScriptNode.jsRustGoPythonSIEMSASTDASTClaude SecurityClaude CodeCIFirmware/SDKs

Company Brief

Coinflow

Provides stablecoin-powered pay-in and payout infrastructure enabling instant settlement, AI-driven fraud prevention, chargeback protection and unified global rails for merchants and marketplaces.

Industry: Fintech Infrastructure

Company Size: Small (11 to 50 employees)

Growth: Growth Stage Startup

Funding: Series A

Headquarters: Chicago, United States

Founded: 2023

Website LinkedIn

Loading job details...

Preparing the role view and application actions.

Coinflow

2 months ago

Security Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 4 hours agoStatus: Live

Job Summary

Location: Chicago

Workplace: Onsite

Employment Type: Full time

Job Function: Cybersecurity

Key Responsibilities

•SIEM & SecOps Dashboard: Stand up and operate our SIEM. Build out the SecOps dashboard that gives engineering, compliance, and leadership a real-time picture of our security posture — alerts, anomalies, auth events, infrastructure changes, and audit-ready evidence in one place.
•Internal Penetration Testing: Run continuous internal pentests against Coinflow services, APIs, infrastructure, and embedded SDKs. Use Claude Security and Claude Code to scale your coverage — automate reconnaissance, fuzzing, code review, and exploit development. Document findings, drive remediation, and measure mean-time-to-fix.
•Vulnerability & Dependency Management: Own the vulnerability lifecycle end-to-end. Triage CVEs across our npm, cargo, and other ecosystems. Build the automation that keeps packages patched without breaking production — including Dependabot tuning, lockfile hygiene, and gated auto-merge for low-risk upgrades.
•Secure Development Lifecycle: Monitor and improve how we ship code. Define secure-by-default patterns for new services, review threat models for high-risk changes, integrate SAST/DAST/secret scanning into CI, and make the secure path the fast path for engineers.
•Compliance Partnership: Work alongside our compliance function to produce the evidence, controls, and monitoring artifacts that PCI DSS, SOC 2, ISO 27001, and DORA auditors need — without turning engineering into a paperwork shop.

Pay and Benefits

Salary: USD 145,000 - 195,000 annually

Equity and Bonus:Equity

Perks:Health Insurance401kWellness Stipend

Key Requirements

•4+ years in a security engineering, product security, or DevSecOps role, ideally at a fintech, payments company, or other regulated environment
•Strong hands-on offensive skills — you've broken real systems, not just run scanners
•Production experience operating a SIEM (Datadog, Splunk, Elastic, Panther, or similar) and building dashboards that engineers actually use
•Fluency in TypeScript/Node and at least passing comfort with Rust, Go, or Python — enough to read our code, find bugs in it, and write the tooling to find more
•Experience with vulnerability management at scale: CVE triage, SCA tooling, dependency upgrade automation

Experience:4+ yearsFintechPaymentsSecurity

Skills:TypeScriptNode.jsRustGoPythonCloudWeb securityPentestingCI/CDSASTDASTSecret scanningVulnerability managementDatadogSplunkElasticPanther

Languages:English

Tech Stack:TypeScriptNode.jsRustGoPythonSIEMSASTDASTClaude SecurityClaude CodeCIFirmware/SDKs

Company Brief

Coinflow

Provides stablecoin-powered pay-in and payout infrastructure enabling instant settlement, AI-driven fraud prevention, chargeback protection and unified global rails for merchants and marketplaces.

Industry: Fintech Infrastructure

Company Size: Small (11 to 50 employees)

Growth: Growth Stage Startup

Funding: Series A

Headquarters: Chicago, United States

Founded: 2023

Website LinkedIn