Staff Software Engineer, Parafin

• 8+ years of experience in infrastructure security, application security, or security operations, preferably in a cloud-native and regulated environment
• Strong understanding of AWS security, including IAM, VPC, and network segmentation best practices
• Experience with threat detection and response, vulnerability management, and incident response workflows
• Familiarity with Kubernetes and container security principles, including RBAC, admission controls, and runtime monitoring
• Knowledge of compliance frameworks (SOC 2, PCI DSS, ISO 27001) and how to operationalize them in engineering environments
• Strong communication and collaboration skills — comfortable working across engineering, product, and compliance teams

Desirable

• We’re looking for an experienced security-focused engineer to help shape and scale Parafin’s security posture across our cloud and platform environments
• Our Security and Infrastructure team owns the foundational systems that power all of Parafin — from compute and networking to identity and compliance — and you’ll play a central role in ensuring those systems are secure, reliable, and compliant
• In this role, you’ll design and operate controls, tooling, and processes that keep our infrastructure resilient and compliant while enabling developers to move quickly and safely
• You’ll partner closely with teams across engineering and compliance to strengthen how we manage access, secure applications, monitor threats, and respond to incidents
• Lead efforts to improve Parafin’s overall security posture across infrastructure, applications, and data systems
• Develop and maintain frameworks for identity, access management, and least-privilege enforcement
• Establish and operate best-in-class security monitoring, alerting, and incident response processes
• Partner with product and infrastructure engineers to embed secure-by-default patterns in our systems and applications
• Define and enforce standards for vulnerability management, secrets handling, and dependency integrity
• Collaborate with compliance and risk teams to build and maintain controls aligned with frameworks such as SOC 2, PCI DSS, and other fintech regulations
• Support audits and security assessments by ensuring controls are properly implemented and evidenced
• Contribute to security awareness and training efforts across engineering teams
• Influence long-term strategy on secure architecture, detection, and response automation