Security Engineer

About the role

TL;DR

We sell trust, and security is core to that promise. We're looking for someone to lead how we think about code and operational security as we scale. You'll help design the systems, practices, and safeguards that enable us to grow without compromising on that trust.

About us

We believe stablecoins are better money and will be the backbone of better payments. We see key structural problems hindering stablecoin adoption, and we’re going to fix them – starting with building a clearinghouse. We’re a small, scrappy team based in NYC, we’ve raised $10M from a16z crypto and other excellent partners, and we’re going to bring better money to the world.

What you'll do:

- Own our security posture across application security, infrastructure security, and operational security.

- Conduct code reviews, threat modeling, and penetration testing to identify and remediate vulnerabilities.

- Design and implement security controls, monitoring, and incident response processes appropriate for a regulated payments environment.

- Establish security policies, procedures, and compliance frameworks (SOC 2, PCI-DSS, etc.) as we scale.

- Hire, manage, and supervise specialist contractors or future security hires as the team grows.

- Ship internal security tooling and features. We need someone who can build, not just advise.

- Work closely with engineering to embed security into our development lifecycle from the start.

What We're Looking For:

- 5+ years of experience in security engineering, with meaningful time at a payments company, bank, or other regulated financial institution.

- Experience with cloud environments (GCP) and infrastructure as code providers (Terraform).

- Breadth across both application/code security and operational security. You don't need to be the world's deepest expert in both, but you need to be knowledgeable in each and capable of hiring and managing those who are.

- You can write production code, not just review it. Ideally you've shipped internal tools or security features yourself.

- Experience building security programs at early-stage or high-growth companies, ideally from scratch.

- Familiarity with compliance frameworks relevant to payments and banking (SOC 2, PCI-DSS, state money transmission, etc.).

- You view a lack of specificity as an opportunity for ownership.

- Based in New York City (or willing to relocate).

Our Values

- Be offended by the status quo - a payment taking 3 days and costing 3% is offensive. Every day that people interact with legacy financial infrastructure costs humanity time and money. Bring the future forward with righteous indignation.

- Be all over it - operate with extreme urgency and accountability. Know the numbers, meet the right people, answer every email, go the extra mile. Ask yourself: can it be done today?