Head of Security Engineering, DriveWealth
$220-250k
Plus bonus and equity
More information about location
Cloud-based, API-driven brokerage infrastructure
Job no longer available
Cloud-based, API-driven brokerage infrastructure
201-500 employees
Job no longer available
$220-250k
Plus bonus and equity
More information about location
201-500 employees
Company mission
To make investing accessible to anyone, anywhere.
Role
Who you are
- 10+ years of relevant security, software, or infrastructure engineering experience, including 4+ years directly managing technical teams
- Demonstrated success owning a security engineering roadmap and delivering measurable improvements across production and corporate environments
- Expertise in AWS and Kubernetes security, with practical experience securing APIs and modern software delivery pipelines
- Strong working knowledge of identity and access management, macOS and Windows endpoint security, remote access/SASE, network security, and SaaS security. Experience with Okta, JumpCloud, or comparable platforms
- Experience building and maintaining security platforms, telemetry pipelines, and automation used by security operations teams
- Ability to review code and infrastructure changes and contribute engineering solutions using Python, Java, or a comparable language and infrastructure-as-code tools such as Terraform
- Sound judgment balancing security, reliability, developer productivity, and cost
- Ability to influence technical decisions and communicate clearly with executives, engineers, and business partners
- Experience delivering security capabilities in regulated financial services or another environment with demanding availability, data protection, and audit requirements. Brokerage, trading infrastructure, and SEC/FINRA experience are preferred
- Bachelor’s degree in a related field or equivalent practical experience. Relevant security, AWS, or Kubernetes certifications are a plus
What the job involves
- DriveWealth LLC is seeking a highly motivated and seasoned Head of Security Engineering to own the security engineering strategy, roadmap, and delivery across our product platform and corporate environment
- Reporting to the Chief Information Security Officer, you will build and lead the Security Engineering team, define its strategy and roadmap, and deliver improvements that support the security of customer data, the firm’s growth, and regulatory obligations
- In this leadership role, you will provide both expert guidance on security and security capability implementation across our AWS platform, Kubernetes services, low-latency trading infrastructure, and corporate technology
- This role is focused on building and maturing the Security Engineering function and we are seeking a leader who combines strategic thinking with hands-on engineering experience to establish scalable controls and enable product innovation
- You will also lead the development and maintenance of infrastructure, services, and automation for Security Operations, partnering with Engineering, IT, Risk, and Compliance within an innovative and entrepreneurial culture
- Roadmap Ownership: Define and deliver a multiyear security engineering strategy and quarterly roadmap across product and corporate environments, aligning architecture standards and investments with business priorities and risk appetite
- Team Leadership: Hire, coach, and develop a team of high-performing security engineers, manage performance, and build technical depth as the team scales
- Delivery & Risk Management: Manage backlogs, budgets, vendors, and dependencies. Work with Security GRC to measure control effectiveness and delivery. Communicate progress, tradeoffs, and residual risks to the CISO and technology leaders
- Product Security: Embed threat modeling, architecture reviews, security testing, and secure design into development and CI/CD, strengthening API authentication, authorization, data isolation, and secrets management
- Infrastructure Security: Secure AWS, including services such as EKS, EC2, DynamoDB, as well as co-located trading infrastructure through least privilege, segmentation, encryption, hardening, and automated guardrails, accounting for availability, recovery, and latency requirements
- Corporate Security: Partner with IT to mature identity, access governance, endpoint, remote access, DLP, communications, and SaaS security across the corporate service estate, including phishing-resistant authentication, device compliance, and data protection
- Exposure Management: Build scanning and remediation capabilities across cloud and on-premises environments, code, dependencies, containers, and infrastructure. Partner with Engineering and IT to prioritize fixes and prevent recurring vulnerabilities and other types of exposures
- Security Platforms: Build, integrate, and maintain the infrastructure and services used for monitoring, investigation, exposure management, and response, including SIEM, SOAR, and endpoint security platforms
- Telemetry Engineering: Own security data pipelines across product and corporate systems, ensuring coverage, quality, enrichment, availability, appropriate retention, and documented maintenance and support procedures
- Operational Partnership: Deliver detection and response automation with Security Operations, provide incident engineering support, and implement lasting improvements. Security Operations retains day-to-day ownership of monitoring, triage, and response
- Investigation & Response Support: Provide Security Operations with necessary expertise and support during security investigations and incident response activities
- Regulatory Controls: Partner with Legal, Compliance, and GRC to implement SEC and FINRA requirements, including SEC Rule 17a-4 controls supporting record capture, preservation, integrity, access, and retrieval. Partner with Security GRC to align the Security Engineering roadmap to regulatory requirements and other necessary compliance controls and activities, such as SOC 2 Type 2 auditing
- Data Security & Privacy: Build and maintain capabilities for data discovery, classification, access control, encryption, retention, and secure deletion to support GDPR and other applicable privacy and data protection requirements
- Control Assurance: Automate control validation and evidence collection. Support audits and regulatory examinations, and drive remediation of technical findings
Our take
Robo-advisory products and fractional share trading have expanded the investment industry's reach, attracting a broader audience than ever before. This shift has necessitated a redesign of the fintech industry's infrastructure to meet the growing demand for accessible, efficient investment options.
DriveWealth plays a pivotal role in this transformation by developing APIs that serve over 100 global fintechs, challenger banks, and digital wallets. Its infrastructure enables seamless robo-advisory services and fractional-share trading, giving retail investors access to US markets and offering innovative stock-reward programs. Among its partners are notable companies like Revolut, MoneyLion, and Hemista.
As the company continues to grow, it remains focused on scaling its business by enhancing its technology stack, pursuing strategic acquisitions, and expanding its team. It is well on its way to its ultimate goal of providing tools that empower companies to create investment products that are both accessible and convenient for everyone.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
-9% employee growth in 12 months
Company
Funding (last 2 of 5 rounds)
Aug 2021
$450m
SERIES D
Oct 2020
$56.7m
SERIES C
Total funding: $552.8m
Company benefits
- Health & wellness packages: We’ve built our benefits offering as a holistic package. We provide multiple health insurance carrier options and plans (medical, dental, vision) with access to HSA and/or FSA tax savings tools. We also provide income protection including life insurance, AD&D, short- and long-term disability, as well as extended coverage resources such as fertility benefits and mental wellness resources
- Vacation & time off: To build a successful organization, employees need time away to rest and recharge, so we provide paid time off including paid holidays and unlimited vacation time. We also strongly believe in work-life balance and, therefore, offer fully remote and hybrid work positions based on role requirements
- Professional developmnet: We believe one of the greatest contributions we can make is investing in our employees’ professional development. Therefore, we offer financial support toward continuing education courses, academic coursework, professional conferences, earning professional certifications, and membership fees to professional organizations
Company HQ
Financial District, New York, NY
Leadership
Naureen Hassan
(CEO)Previously President of the Americas at UBS, was on the Board of Governors at FINRA and Partnership For New York City and was the First Vice President of the Federal Reserve Bank of New York.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 7 more jobs at DriveWealth