Senior Security Engineer

Job description

## About Pave Bank Pave Bank is the world’s first programmable business bank. Built by the founders behind Monzo and BigPay, we’re redefining global business banking by combining programmable financial infrastructure with world-class client experiences. ## About the Role Pave Bank is building the next generation of programmable banking infrastructure. We’re looking for a **Senior Security Engineer** who combines strong software engineering experience with a deep security background. You should be someone who understands how software is built, how systems can be attacked, and how to identify and address security vulnerabilities. You'll work closely with our engineering teams to identify weaknesses, conduct security testing, and help build secure systems. This is a hands-on role for someone who is comfortable getting deep into code and systems, with particular experience in **Go, Rust, or Java**, and who has worked in security within **fintech or crypto** environments. ## What You'll Do - Review Pave Bank's platform and product code to identify security vulnerabilities and potential attack paths. - Conduct **red team exercises and penetration tests** across Pave's applications and systems. - Identify, investigate, and help remediate security vulnerabilities. - Work closely with Product and Engineering teams to build and ship secure solutions. - Review code and system designs from a security perspective. - Write and contribute to internal tools, libraries, and automation to improve security testing and enforcement. - Continuously test internal and external applications for vulnerabilities. - Educate engineering teams on secure coding and security practices. - Stay current on the latest threats, vulnerabilities, and attack techniques relevant to Pave's systems. - Assist with third-party application security reviews and penetration tests. ## What You'll Bring - Strong **software engineering experience** with a background in security. - Strong programming experience in one or more of **Go, Rust, or Java**. - Professional experience working in **security within a fintech, banking, payments, crypto, or similar financial technology environment**. - Hands-on experience with **red teaming and penetration testing**. - Strong understanding of attacker tools, techniques, and how software vulnerabilities can be exploited. - An adversary-first mindset when approaching software and system design. - Ability to work independently and take ownership of security problems from identification through remediation. - Strong communication skills, with the ability to work effectively with engineers and explain security issues clearly. - Curiosity and a desire to continuously learn and stay ahead of evolving security threats. ## Nice to Have - Experience writing secure backend code in Go, Rust, or Java. - Familiarity with authentication and authorization patterns such as OAuth2 and RBAC. - General understanding of blockchain technologies and cryptocurrency systems and their security implications. - Experience working in a fast-paced startup environment. ## Why Us? - We recently raised $39 million in our Series A (led by Accel), positioning the company for major growth and giving you a rare chance to join while things are still moving fast. - Work alongside a founding team from Monzo and BigPay, bringing top-tier fintech expertise to the company. - Tackle real-world security challenges in a regulated, fast-growing fintech environment. - Learn from and collaborate with experienced engineers while developing your security career.