Security Engineer

Coinflow
Chicago
Workplace: OnsiteFull timeUSD 145,000 - 195,000 annuallyFunction: CybersecurityExperience: 4+ yearsSkills: ["TypeScript","Node.js","Rust","Go","Python","Cloud","Web security","Pentesting","CI/CD","SAST","DAST","Secret scanning","Vulnerability management","Datadog","Splunk","Elastic","Panther"]

Security Engineer to own Coinflow’s defensive and offensive security posture. You’ll build the SecOps backbone, perform internal pentests, manage vulnerabilities and dependencies, shape the Secure Development Lifecycle, and partner with compliance to provide evidence for PCI DSS, SOC 2, ISO 27001, and DORA. You’ll work with AI-native security tooling (Claude) and influence engineering across the SDLC.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Coinflow
Coinflow
4 months ago

Security Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 5 hours agoStatus: Live

Job Summary

Security Engineer to own Coinflow’s defensive and offensive security posture. You’ll build the SecOps backbone, perform internal pentests, manage vulnerabilities and dependencies, shape the Secure Development Lifecycle, and partner with compliance to provide evidence for PCI DSS, SOC 2, ISO 27001, and DORA. You’ll work with AI-native security tooling (Claude) and influence engineering across the SDLC.
Location: Chicago
Workplace: Onsite
Employment Type: Full time
Job Function: Cybersecurity

Key Responsibilities

  • •SIEM & SecOps Dashboard: Stand up and operate our SIEM. Build out the SecOps dashboard that gives engineering, compliance, and leadership a real-time picture of our security posture — alerts, anomalies, auth events, infrastructure changes, and audit-ready evidence in one place.
  • •Internal Penetration Testing: Run continuous internal pentests against Coinflow services, APIs, infrastructure, and embedded SDKs. Use Claude Security and Claude Code to scale your coverage — automate reconnaissance, fuzzing, code review, and exploit development. Document findings, drive remediation, and measure mean-time-to-fix.
  • •Vulnerability & Dependency Management: Own the vulnerability lifecycle end-to-end. Triage CVEs across our npm, cargo, and other ecosystems. Build the automation that keeps packages patched without breaking production — including Dependabot tuning, lockfile hygiene, and gated auto-merge for low-risk upgrades.
  • •Secure Development Lifecycle: Monitor and improve how we ship code. Define secure-by-default patterns for new services, review threat models for high-risk changes, integrate SAST/DAST/secret scanning into CI, and make the secure path the fast path for engineers.
  • •Compliance Partnership: Work alongside our compliance function to produce the evidence, controls, and monitoring artifacts that PCI DSS, SOC 2, ISO 27001, and DORA auditors need — without turning engineering into a paperwork shop.

Pay and Benefits

Salary: USD 145,000 - 195,000 annually
Equity and Bonus:Equity
Perks:Health Insurance401kWellness Stipend

Key Requirements

  • •4+ years in a security engineering, product security, or DevSecOps role, ideally at a fintech, payments company, or other regulated environment
  • •Strong hands-on offensive skills — you've broken real systems, not just run scanners
  • •Production experience operating a SIEM (Datadog, Splunk, Elastic, Panther, or similar) and building dashboards that engineers actually use
  • •Fluency in TypeScript/Node and at least passing comfort with Rust, Go, or Python — enough to read our code, find bugs in it, and write the tooling to find more
  • •Experience with vulnerability management at scale: CVE triage, SCA tooling, dependency upgrade automation
Experience:4+ yearsFintechPaymentsSecurity
Skills:TypeScriptNode.jsRustGoPythonCloudWeb securityPentestingCI/CDSASTDASTSecret scanningVulnerability managementDatadogSplunkElasticPanther
Languages:English
Tech Stack:TypeScriptNode.jsRustGoPythonSIEMSASTDASTClaude SecurityClaude CodeCIFirmware/SDKs

Company Brief

Coinflow
Provides stablecoin-powered pay-in and payout infrastructure enabling instant settlement, AI-driven fraud prevention, chargeback protection and unified global rails for merchants and marketplaces.
Industry: Fintech Infrastructure
Company Size: Small (11 to 50 employees)
Growth: Growth Stage Startup
Funding: Series A
Headquarters: Chicago, United States
Founded: 2023
WebsiteLinkedIn