Senior Security Engineer

About the role

Greenlight is a family technology company on a mission to help families raise financially smart kids and navigate life together. Its suite of products — including the Greenlight app, debit card, Safe Family GPS trackers, and Family Hub — brings together financial tools, safety features, and everyday family management in one connected experience. Designed for busy families who want convenience without compromise, Greenlight continues to innovate alongside the evolving needs of modern life. Today, more than 6.5 million family members trust Greenlight to stay in sync.

At Greenlight, we're here to make the day-to-day easier and futures brighter, so families can spend less time managing life, and more time living it. That's why we get out of bed every morning.

We are seeking a Senior Security Engineer to join our growing security team. This role will be critical in ensuring the security of our products across the entire software development lifecycle (SDLC) and provide support on different security initiatives. You will work closely with engineering, product, and operations teams to embed security best practices from design through to deployment. You will play a critical role in shaping our security posture, embedding security into our development lifecycle, and protecting our customers' data.

Technologies we use: - Backend: Node.js, Kotlin, Java, Go

- Frontend: React, Redux, Swift, Kotlin

- REST, gRPC, graphQL

- AWS

- MySQL, DynamoDB, Redis

- Kubernetes, Ambassador, Helm, Rancher

What you will be doing: - Support in executing a comprehensive product security strategy that aligns with the company's goals and risk appetite.

- You will work hands on across code, infrastructure, and CI/CD to create agents, services and pipelines that detect, prevent and remediate risks leveraging AI where it adds value.

- Design, build and operate security automation for the SDLC (code scanning, dependency risk management, secrets detection, policy-as-code) integrated into CI/CD.

- Perform Manual Design and Implementation Reviews of Greenlight products and services from a security perspective.

- Establish and enforce secure development standards (i.e. API security, Security patterns, IaC, etc.) and best practices across the organization.

- Serve as SME on the practical security of our AI and LLM ecosystem. Lead threat modeling exercises for novel AI systems applying advanced security and privacy best practices.

- Leverage automations and tools to continuously test, fuzz and validate products and platform components for security issues.

- Perform Penetration testing and retesting to validate fixes.

- Responsible for triaging findings from security researchers and leading incident response for PSIRT.

- OnCall support for incident response and lead product-related security events and vulnerabilities.

- Partner with engineering, product, and platform teams to embed security by design patterns, drive threat modeling and land pragmatic guardrails that unblock developers.