Staff Product Security Engineer, Valon Mortgage
Customer Platform
$190-260k
This Base Compensation pay range applies to our New York City located staff and may differ according to location. Offers equity
AI-native operating system for mortgage servicing
Open for applications
AI-native operating system for mortgage servicing
501-1000 employees
Open for applications
$190-260k
This Base Compensation pay range applies to our New York City located staff and may differ according to location. Offers equity
501-1000 employees
Company mission
To power the future of homeownership with modern servicing technology.
Role
Who you are
- Extensive experience in product security, application security, or security architecture roles, with ownership of security design for SaaS platforms including multi-tenancy and customer-facing security capabilities
- Strong background in cloud security and modern infrastructure, with hands-on experience securing cloud environments (GCP preferred)
- Proven experience in SaaS IAM and tenant security (e.g., authentication/authorization, RBAC, SSO/SAML/OIDC, SCIM, MFA, audit logs)
- Expertise in designing secure platform controls (e.g., APIs, service-to-service auth, encryption/KMS/CMEK, logging/monitoring)
- Demonstrated ability to build and maintain security reference architectures
- Expert-level experience leading threat modeling and security design reviews including security-focused code reviews
- Applied knowledge with industry security and compliance frameworks (OWASP, NIST, CIS, SOC 2/ISO 27001 concepts)
- Highly hands-on engineer with proven ability to operate autonomously, drive multiple complex cross-functional efforts, and influence independently
- Excellent communication and collaboration skills, including the ability to explain complex security concepts to both technical and non-technical stakeholders
- Prior software engineering experience and/or coding ability (Python) is preferred
- Experience working in high-growth or startup environments is a plus
- 8+ years in progressive senior security engineering or architect level roles, with 3+ years leading security design for enterprise-grade cloud and SaaS platforms
- Bachelor's degree in Information Security, Computer Science, Technology or related field
- Relevant security certifications (e.g., CISSP, CISM, CCSK, CCSP or similar)
- Proven ability to design security reference architectures and implement customer platform security controls and technologies (IAM, API security, encryption/key management, logging/monitoring and others)
- Hands-on experience with modern security technologies and tooling across cloud and application security
What the job involves
- We are seeking a seasoned and highly skilled Staff Product Security Engineer - Customer Platform to join our growing team!
- As a key security member at Valon, you will play a critical role in ensuring the security of our organization's systems, cloud infrastructure, products, and data
- This role blends product security architecture and technical control implementation, incorporating security by design into ValonOS
- You will be hands-on and help shape how security is designed, built, and scaled across our SaaS platform both in foundational infrastructure and in customer-facing security features
- Define and evolve product security architecture and strategy for Valon’s multi-tenant SaaS platform
- Architect and guide secure implementation of customer-facing security capabilities in conjunction with Engineering (e.g., authentication / authorization models, identity integration, access controls, audit and logging, encryption / key management)
- Build and maintain security reference architectures and standardized secure design patterns for product teams
- Lead threat modeling, security design and code reviews for new features, services, and major architectural changes
- Collaborate with Product, Engineering, Data, Compliance, Legal, and other teams to identify and drive mitigation for product and data security risks
- Support vulnerability triage, remediation strategy, and root cause analysis for product security issues
- Support security compliance and regulatory needs (e.g., SOC 2, CCPA, NYDFS, FTC), including customer-facing security discussions and due diligence
- Develop, implement, and enforce security policies, standards, and procedures
- Support operational activities including security advisory and consultative reviews, incident response, issue remediation, and other security processes
Our take
The mortgage servicing market is huge but surprisingly outdated. In the US alone, it covers roughly $13T in mortgages, yet many servicers still use legacy systems and manual processes to manage payments, compliance and customer support. Because mortgage servicing involves complex regulations and many exceptions, these older systems can be inefficient and costly to run, creating a strong opportunity for modern technology to improve how the industry operates.
Valon is trying to modernize this space with ValonOS, an AI-native operating system built specifically for mortgage servicing. The platform doesn't just store loan data, it also captures the rules and workflows behind servicing decisions. This allows companies to automate routine processes, improve visibility into operations, and manage compliance more easily. To prove the system works, Valon has also built and run its own large mortgage servicing business on the platform.
The company has gained strong backing from major industry players too. Investor Rithm Capital Corp. plans to roll out Valon's technology to over 4M homeowners through Newrez, one of the largest US mortgage servicers. If this rollout succeed, it could demonstrate that modern, AI-driven systems can operate at industry scale and potentially reshape mortgage servicing.
Freddie
Company Specialist at Welcome to the Jungle
Insights
21% employee growth in 12 months
Company
Funding (last 2 of 7 rounds)
Oct 2024
$100m
SERIES C
Jul 2024
$69.8m
LATE VC
Total funding: $348.8m
Company benefits
- Compensation: You’ll receive a highly competitive compensation package with room to grow.
- Time Away: We offer a generous PTO program, sick time, and company holidays.
- Flexible Work: Remote, hybrid, or in-office. We’ve got it all and aim for you to work where it works. Where possible, we offer geographic flexibility.
- Health Benefits: Health, dental, and vision insurance are all company-sponsored to keep you healthy and strong.
- Parental Leave: Birthing and non-birthing parents receive 12 weeks of fully paid time to welcome a new child.
Company HQ
Union Square, New York, NY
Leadership
Andrew Wang
(Co-Founder & CEO)Andrew studied Computer Science at Harvard before interning as a Software Engineer at The White House and Google. He was also an Analyst at Goldman Sachs and spent 4 years as a Principal to Soros Fund Management.
Linda Du
(COO)Linda studied Computer Science and Statistics at Harvard. She then worked at Samlyn Capital and Two Sigma prior to co-founding Valon in 2020.
Jake Mintz
(CPO)Prior to joining Valon in 2024, Jake was the Head of Product, Consumer at Stipe. He also spent 7 years at Google as a Product Lead, Camera (Android/Google Pixel, Head of Product, VR/AR (Media, Communications) and as the Head of Product, Business Management.
Share this job
View 24 more jobs at Valon Mortgage