Information Security Engineer, AffiniPay

• This role will require experience in incident, problem, and change management, and will work closely with other engineering teams to ensure seamless security integration across systems
• 3-5 years of experience in security engineering or related roles, with a focus on cloud security, incident response, and data protection
• Hands-on experience with AWS security, including vulnerability management, security operations, and cloud security best practices
• Experience leading technical teams, guiding efforts across Incident, Problem, and Change Management frameworks
• Strong experience in incident response and forensics, with proven skills in managing security breaches and mitigating risks
• Certifications such as CISSP, CISM, CISA, CCSP, GSEC, or CEH are preferred

Desirable

• The Security Engineer will focus on ensuring the security and integrity of AffiniPay's systems by working closely with IT Operations, Sales, and Privacy teams
• This role will be responsible for improving security operations within AWS environments, providing technical leadership in incident response, data protection, and security best practices
• The SE will also assist with product security initiatives, providing thought leadership for continuous improvement and supporting data privacy initiatives, such as DLP, data mapping, and classification
• Manage and maintain security across AffiniPay's AWS infrastructure, focusing on identifying vulnerabilities, reviewing security findings, and recommending areas of improvement to protect sensitive data and maintain compliance
• Provide technical guidance and mentorship to the team of Information Security practitioners, offering strategic insight on operational security, cloud security, and application security. Lead efforts to mature the security posture across systems
• Work with IT Operations and Sales teams to support product security questions, provide security guidance for customer engagements, and ensure product innovations meet strict security standards
• Collaborate with the Privacy Operations team to assist with data mapping, data loss prevention (DLP), data scanning, and data classification efforts. Support ongoing initiatives to ensure the security and privacy of sensitive data and compliance with privacy regulations
• Lead incident response activities, including investigation, forensic analysis, and remediation of security incidents. Ensure that the incident response process aligns with best practices and business objectives
• Evaluate technical solutions to business challenges, provide thought leadership to drive continuous improvements, and establish comprehensive system documentation. Support project management through status reporting and change management processes, representing changes via the Change Advisory Board (CAB)
• Collaborate with Dev teams during the architecture and design phases to embed secure coding practices. Perform threat modeling, secure code reviews, and guide remediating vulnerabilities uncovered by tools like Snyk, GitHub secret scanning, and ASV scans
• Collaborate with the Security-focused Quality Engineer to define and validate application-layer security controls. Provide input into secure test planning, support test case prioritization based on compliance obligations (PCI, SOC 2, HIPAA), and ensure that identified vulnerabilities are remediated, tested, and closed out in accordance with business risk tolerances
• Maintain and tune security tooling (e.g., Snyk, CrowdStrike, AWS Security Hub/GuardDuty). Integrate findings into Jira for tracking and support prioritization workflows with Engineering
• Collaborate with the Compliance team to define security policies, participate in control reviews for audits (SOC 2, PCI), and contribute to the organization’s risk register by identifying, escalating, and mitigating technical security risks
• Participate in due diligence and onboarding efforts for M&A targets and new product initiatives. Guide risk posture, data handling, and architectural security design
• Key Outcomes for Success
• Improve security monitoring, vulnerability detection, and remediation within AWS, ensuring the environment is hardened against threats and aligned with compliance requirements
• Establish and monitor security controls in CI/CD workflows, including vulnerability gating, secrets scanning, and pipeline hardening for all core services and brands
• Drive adoption of AWS Security Hub, IAM least privilege, and remediations identified in platform-level security scans (e.g., header injection, TLS cipher updates)
• Lead Snyk-based remediation efforts, ensuring 95%+ resolution of critical vulnerabilities within SLA and proactive communication with Engineering stakeholders
• Lead and enhance AffiniPay's incident response efforts, ensuring timely and effective responses to security events while minimizing disruption to business operations
• Collaborate with Privacy Operations to ensure that data mapping, DLP, and data classification initiatives are successful in safeguarding sensitive information and meeting compliance requirements
• Provide critical security expertise to Sales, IT Ops, and other teams, ensuring that AffiniPay's products and services meet the highest security standards and are prepared for market challenges

• All interviews take place over phone call, Zoom/Google Meet or in person. All offers are communicated verbally by our Talent Acquisition Specialists with a written offer letter as a follow up