Staff Product Security Engineer, Valon Mortgage
Customer Platform
$190-260k
This Base Compensation pay range applies to our New York City located staff and may differ according to location. Offers equity
Transforming $25B+ mortgage servicing market with software
Be an early applicant
Transforming $25B+ mortgage servicing market with software
201-500 employees
Be an early applicant
$190-260k
This Base Compensation pay range applies to our New York City located staff and may differ according to location. Offers equity
201-500 employees
Company mission
To champion homeowners on their financial journey, as the partner they trust with their home and future.
Role
Who you are
- Extensive experience in product security, application security, or security architecture roles, with ownership of security design for SaaS platforms including multi-tenancy and customer-facing security capabilities
- Strong background in cloud security and modern infrastructure, with hands-on experience securing cloud environments (GCP preferred)
- Proven experience in SaaS IAM and tenant security (e.g., authentication/authorization, RBAC, SSO/SAML/OIDC, SCIM, MFA, audit logs)
- Expertise in designing secure platform controls (e.g., APIs, service-to-service auth, encryption/KMS/CMEK, logging/monitoring)
- Demonstrated ability to build and maintain security reference architectures
- Expert-level experience leading threat modeling and security design reviews including security-focused code reviews
- Applied knowledge with industry security and compliance frameworks (OWASP, NIST, CIS, SOC 2/ISO 27001 concepts)
- Highly hands-on engineer with proven ability to operate autonomously, drive multiple complex cross-functional efforts, and influence independently
- Excellent communication and collaboration skills, including the ability to explain complex security concepts to both technical and non-technical stakeholders
- Prior software engineering experience and/or coding ability (Python) is preferred
- Experience working in high-growth or startup environments is a plus
- 8+ years in progressive senior security engineering or architect level roles, with 3+ years leading security design for enterprise-grade cloud and SaaS platforms
- Bachelor's degree in Information Security, Computer Science, Technology or related field
- Relevant security certifications (e.g., CISSP, CISM, CCSK, CCSP or similar)
- Proven ability to design security reference architectures and implement customer platform security controls and technologies (IAM, API security, encryption/key management, logging/monitoring and others)
- Hands-on experience with modern security technologies and tooling across cloud and application security
What the job involves
- We are seeking a seasoned and highly skilled Staff Product Security Engineer - Customer Platform to join our growing team!
- As a key security member at Valon, you will play a critical role in ensuring the security of our organization's systems, cloud infrastructure, products, and data
- This role blends product security architecture and technical control implementation, incorporating security by design into ValonOS
- You will be hands-on and help shape how security is designed, built, and scaled across our SaaS platform both in foundational infrastructure and in customer-facing security features
- Define and evolve product security architecture and strategy for Valon’s multi-tenant SaaS platform
- Architect and guide secure implementation of customer-facing security capabilities in conjunction with Engineering (e.g., authentication / authorization models, identity integration, access controls, audit and logging, encryption / key management)
- Build and maintain security reference architectures and standardized secure design patterns for product teams
- Lead threat modeling, security design and code reviews for new features, services, and major architectural changes
- Collaborate with Product, Engineering, Data, Compliance, Legal, and other teams to identify and drive mitigation for product and data security risks
- Support vulnerability triage, remediation strategy, and root cause analysis for product security issues
- Support security compliance and regulatory needs (e.g., SOC 2, CCPA, NYDFS, FTC), including customer-facing security discussions and due diligence
- Develop, implement, and enforce security policies, standards, and procedures
- Support operational activities including security advisory and consultative reviews, incident response, issue remediation, and other security processes
Our take
Valon is attempting to bring smoother, clearer customer service to the often unsophisticated industry of mortgage services. Its cloud-native mobile platform allows borrowers to make payments and manage escrow accounts while avoiding time-consuming call centers, inaccurate information and poorly designed websites. In turn, lenders can use the platform to request API feeds to gather information on customer performance.
The company is aiming to disrupt and bring down the costs in a market that it sees as heavily monopolized, and which is largely devoid of customer-oriented innovation. Currently, mortgage servicing giant Black Knight controls over half of all residential loans in the US, the result of which has seen a 250% increase in servicing costs in the last decade.
Valon's growth so far has been remarkable. The company went from zero contracts in 2019 to $65 billion in mortgages in 2024, with a 400% year-on-year growth. Its remarkable growth attracted over $169 million in funding in 2024. On top of this boost, it has further diversified its capabilities to include servicing government-sponsored home loans from the Federal National Mortgage Association.
Freddie
Company Specialist at Welcome to the Jungle
Insights
21% employee growth in 12 months
Company
Funding (last 2 of 7 rounds)
Oct 2024
$100m
SERIES C
Jul 2024
$69.8m
LATE VC
Total funding: $348.8m
Company benefits
- Fully Covered Healthcare Premiums on Zero Deductible Medical/Dental/Vision Insurance Plans
- Flexible Sick Days
- Equity Packages
- Generous Vacation Policy + Multiple Company Holidays
- Provided Laptop, Custom Acessories, and Ergonomic Equipment
- Commuter Benefits
- Paid Parental Leave
- Unlimited Snacks and Drinks
Company HQ
Union Square, New York, NY
Leadership
Andrew Wang
(CEO & Co-Founder)Studied Computer Science at Harvard. Interned as a Software Engineer at The White House, and Google. Was an Analyst at Goldman Sachs. Spent 4 years as a Principal to Soros Fund Management.
Linda Du
(COO)Studied Computer Science and Statistics at Harvard. Worked at Samlyn Capital and Two Sigma prior to joining Valon.
Jake Mintz
(CPO)Studied Electrical Engineering at Santa Clara University. Co-founded Bump Technologies which was acquired by Google.
Share this job
View 25 more jobs at Valon Mortgage