Senior Security Engineer, Product Security

Overview

Come build at the intersection of AI and fintech. At Ocrolus, we’re on a mission to help lenders automate workflows with confidence—streamlining how financial institutions evaluate borrowers and enabling faster, more accurate lending decisions.

Our AI-powered data and analytics platform is trusted at scale, processing nearly one million credit applications every month across small business, mortgage, and consumer lending. By integrating state-of-the-art open- and closed-source AI models with our human-in-the-loop verification engine, Ocrolus captures data from financial documents with over 99% accuracy. Thanks to our advanced fraud detection and comprehensive cash flow and income analytics, our customers achieve greater efficiency in risk management, and provide expanded access to credit—ultimately creating a more inclusive financial system.

Trusted by more than 400 customers—including industry leaders like Better Mortgage, Brex, Enova, Nova Credit, PayPal, Plaid, SoFi, and Square—Ocrolus stands at the forefront of AI innovation in fintech. Join us, and help redefine how the world’s most innovative lenders do business.

Summary

Ocrolus is a fast-growing financial technology SaaS (Software-as-a-Service) organization. We are building a world-class security program to secure Ocrolus and our customers' data. We are looking for diverse security practitioners to help us design, build, and scale product security at Ocrolus. We value critical thinking, creativity, data-driven and intelligence-driven approaches, and offensive experience. Security is a collaborative process, where security is a partner to help achieve business goals securely. We believe in saying “yes and;” instead of “no” when recommending security objectives. We don’t believe in using fear or penalty for the enforcement of security policies and processes, and we will always provide evidence and justification for security controls.

What you’ll do

• Work closely with the CISO to build the product security strategy, roadmap, and metrics to measure and monitor product security posture.
• Conduct design and architecture reviews for Ocrolus products and infrastructure.
• Perform code reviews and application security assessments, including AI / LLMs.
• Engage with the development teams to conduct secure design reviews / threat modeling exercises.
• Identify vulnerabilities / threats that could affect Ocrolus products through independent research and work with the developers on workarounds / mitigation plans.
• Be the go-to person for developers in solving critical issues relating to secure product development.
• Run penetration testing targeting critical data, services, and environments. Report underlying security issues and propose enhanced security protections.
• Write and disseminate security guidelines for common security issues, remediation, and security technology baselines.
• Collaborate with stakeholders to ensure secure deployment of AI systems by staying updated on AI security best practices and executing adversarial testing strategies.
• Guide engineering teams on secure coding and testing principles / practices.
• Be a role model for the team and provide a healthy platform for learning and growth. Build relationships with stakeholders throughout the engineering and product organizations.
• Spread security culture throughout the organization.

What you’ll bring

Good to have

Life at Ocrolus

We’re a team of builders, thinkers, and problem solvers who care deeply about our mission — and each other. As a fast-growing, remote-first company, we offer an environment where you can grow your skills, take ownership of your work, and make a meaningful impact.

Note : The original content includes company values; this refinement preserves the intent and wording closely while converting formatting to allowed HTML.

#J-18808-Ljbffr