Senior Security Engineer San Francisco, CA

Founded in 2020 by a team of leaders from Braintree, PayPal, and Lending Club, Highnote is an all in one card issuer processor and program management platform. We give digital-first organizations the flexibility to easily issue and process payment cards that accelerate business growth and profitability.

We’ve raised $104M+ and grown our team to 120+ employees. Headquartered in San Francisco, we’ve managed to build one of the most advanced payments teams in the industry, with team members in 25+ US states.

Operating through our core values of customer obsession, executional excellence, intentional inclusion, we’re helping businesses grow for the future by creating the payment products demanded by tomorrow, with the ability to solve for use cases that don’t exist yet.

We are fast-moving, hands-on, and strongly believe everyone deserves a seat at the table. We believe we’re unlocking incredible opportunities that can change the future of payments, as long as we have the right people to make it happen.

Job Description

We are looking for a Senior Security Engineer to lead the overall security efforts at Highnote. It's an opportunity to take all your prior security experience and learnings, work with engineering leadership and various teams to improve security, and most importantly, be an evangelist for security across the company. Ideal candidates should have similar experience with early-stage companies.

What you’ll be doing

• Refine and execute the overall security strategy
• Drive to and maintain security policies and processes
• Own various compliance programs such as PCI-DSS, SOC1 / 2, and GDPR
• Own and drive application and web security initiatives, ensuring industry best practices
• Serve as a security consultant in design discussions and reviews
• Drive secure coding and SDLC initiatives
• Manage penetration testing efforts and bug bounty programs
• Evaluate various technologies for improving security defenses and monitoring
• Integrate security controls across cloud-native and third-party tools
• Own infrastructure and vendor security audits
• Work with the infrastructure team on securing GCP, AWS, and On-Premise Colos
• Implementing security best practices across Kubernetes and Istio
• Own security incident response and related systems

What we are looking for

Why Highnote?

Please note that positions located in San Francisco are hybrid and include core working days of Tuesday, Wednesday, Thursday in office. We provide flexible work options based on distance from our downtown SF office. Highnote believes in the power of face-to-face, personal connection. As a result, we prioritize in-person candidates.

Highnote is a diverse and inclusive company committed to growing a diverse and inclusive team. We invite people from all backgrounds and identities to apply. We do not discriminate based on gender identity or expression, sexual orientation, race, religion, age, national origin, citizenship, disability, pregnancy status, veteran status, or any other characteristics protected by US federal state or local laws, or the laws of the country or jurisdiction where you work. Additionally, we encourage everyone to share which pronouns you wish for us to use when addressing you (i.e. : she / her, he / him, they / them, etc).

Apply for this job

indicates a required field

First Name

Last Name

Email

Phone

Resume / CV

Enter manually

Accepted file types : pdf, doc, docx, txt, rtf

Enter manually

Accepted file types : pdf, doc, docx, txt, rtf

#J-18808-Ljbffr