Security Engineer

Open roleSecurity EngineerSan Francisco, CA (On-site) Full-time [data-slot=checkbox-group]]:gap-3 has-[>[data-slot=radio-group]]:gap-3" aria-label="Role summary">]:w-full [&>.sr-only]:w-auto">As a Security Engineer, you will take charge of protecting Methodic’s platform and data. This includes performing security reviews, implementing safeguards, and ensuring compliance with relevant security standards. Our clients trust us with sensitive financial data and transactions, so security is a non-negotiable priority. You’ll work across the stack to identify vulnerabilities, recommend improvements, and foster a security-first mindset throughout the team.Responsibilities[data-slot=checkbox-group]]:gap-3 has-[>[data-slot=radio-group]]:gap-3 gap-3" aria-label="Role responsibilities">]:w-full [&>.sr-only]:w-auto">Conduct regular security audits of our application (code and infrastructure) to identify vulnerabilities such as injection flaws, data exposure, or access control issues.]:w-full [&>.sr-only]:w-auto">Implement and manage security measures like encryption (for data at rest and in transit), secure authentication/authorization (OAuth, JWT, multi-factor auth), and robust access control policies.]:w-full [&>.sr-only]:w-auto">Set up and maintain tools for vulnerability scanning and penetration testing; coordinate periodic third-party security assessments and ensure any findings are remediated promptly.]:w-full [&>.sr-only]:w-auto">Monitor security logs and alerts for any signs of breaches or suspicious activity; respond to security incidents with thorough investigation and patching of the root cause.]:w-full [&>.sr-only]:w-auto">Ensure compliance with security-related regulations and standards (e.g., GDPR for data privacy, PCI DSS if handling payments, SOC 2 for service processes) by implementing necessary controls and documenting practices.]:w-full [&>.sr-only]:w-auto">Educate and train the engineering team on secure coding and operational practices (run security workshops, share updates on new vulnerabilities or attack vectors relevant to our tech stack).]:w-full [&>.sr-only]:w-auto">Stay up-to-date with the latest threats, vulnerabilities, and mitigation techniques; proactively implement updates or changes to keep our platform secure against emerging risks.Requirements[data-slot=checkbox-group]]:gap-3 has-[>[data-slot=radio-group]]:gap-3 gap-3" aria-label="Role requirements">]:w-full [&>.sr-only]:w-auto">5+ years of experience in cybersecurity or application security roles, preferably with exposure to securing cloud-based web applications.]:w-full [&>.sr-only]:w-auto">In-depth knowledge of common web and API vulnerabilities (OWASP Top 10, etc.) and experience applying remediations.]:w-full [&>.sr-only]:w-auto">Familiarity with cryptographic principles and experience implementing encryption, key management, and secure protocols.]:w-full [&>.sr-only]:w-auto">Hands-on experience with security tools (static analysis, dynamic analysis, intrusion detection systems, etc.).]:w-full [&>.sr-only]:w-auto">Understanding of network security fundamentals and cloud security best practices.]:w-full [&>.sr-only]:w-auto">Experience ensuring compliance with frameworks or standards like ISO 27001, SOC 2, PCI, or others relevant to a SaaS business.]:w-full [&>.sr-only]:w-auto">Strong analytical mindset and attention to detail, with excellent problem-solving skills in high-pressure situations (like responding to an incident).]:w-full [&>.sr-only]:w-auto">A collaborative approach – able to work with developers, DevOps, and compliance to integrate security into every aspect of our operations.Submit your applicationProvide a few details and our hiring team will reach out with next steps.[data-slot=checkbox-group]]:gap-3 has-[>[data-slot=radio-group]]:gap-3 gap-5"> Candidate details]:w-full [&>.sr-only]:w-auto"> [data-slot=field]]:w-full has-[>[data-slot=field]]:flex-col has-[>[data-slot=field]]:rounded-md has-[>[data-slot=field]]:border [&>[data-slot=field]]:p-4 has-data-[state=checked]:bg-primary/5 has-data-[state=checked]:border-primary dark:has-data-[state=checked]:bg-primary/10" data-slot="field-label" for="name">Full name]:w-full [&>.sr-only]:w-auto"> [data-slot=field]]:w-full has-[>[data-slot=field]]:flex-col has-[>[data-slot=field]]:rounded-md has-[>[data-slot=field]]:border [&>[data-slot=field]]:p-4 has-data-[state=checked]:bg-primary/5 has-data-[state=checked]:border-primary dark:has-data-[state=checked]:bg-primary/10" data-slot="field-label" for="email">Email address]:w-full [&>.sr-only]:w-auto"> [data-slot=field]]:w-full has-[>[data-slot=field]]:flex-col has-[>[data-slot=field]]:rounded-md has-[>[data-slot=field]]:border [&>[data-slot=field]]:p-4 has-data-[state=checked]:bg-primary/5 has-data-[state=checked]:border-primary dark:has-data-[state=checked]:bg-primary/10" data-slot="field-label" for="phone">Phone number (optional)]:w-full [&>.sr-only]:w-auto"> [data-slot=field]]:w-full has-[>[data-slot=field]]:flex-col has-[>[data-slot=field]]:rounded-md has-[>[data-slot=field]]:border [&>[data-slot=field]]:p-4 has-data-[state=checked]:bg-primary/5 has-data-[state=checked]:border-primary dark:has-data-[state=checked]:bg-primary/10" data-slot="field-label" for="linkedin">LinkedIn / Portfolio (optional)]:w-full [&>.sr-only]:w-auto"> [data-slot=field]]:w-full has-[>[data-slot=field]]:flex-col has-[>[data-slot=field]]:rounded-md has-[>[data-slot=field]]:border [&>[data-slot=field]]:p-4 has-data-[state=checked]:bg-primary/5 has-data-[state=checked]:border-primary dark:has-data-[state=checked]:bg-primary/10" data-slot="field-label" for="notes">Notes]:w-full [&>.sr-only]:w-auto"> [data-slot=field]]:w-full has-[>[data-slot=field]]:flex-col has-[>[data-slot=field]]:rounded-md has-[>[data-slot=field]]:border [&>[data-slot=field]]:p-4 has-data-[state=checked]:bg-primary/5 has-data-[state=checked]:border-primary dark:has-data-[state=checked]:bg-primary/10" data-slot="field-label" for="resume">Resume (PDF)a:hover]:text-primary [&>a]:underline [&>a]:underline-offset-4">Optional, max 5MB.]:w-full [&>.sr-only]:w-auto sr-only" aria-hidden="true"> [data-slot=field]]:w-full has-[>[data-slot=field]]:flex-col has-[>[data-slot=field]]:rounded-md has-[>[data-slot=field]]:border [&>[data-slot=field]]:p-4 has-data-[state=checked]:bg-primary/5 has-data-[state=checked]:border-primary dark:has-data-[state=checked]:bg-primary/10" data-slot="field-label" for="contact_reference">Leave this field empty]:w-full [&>.sr-only]:w-auto">a:hover]:text-primary [&>a]:underline [&>a]:underline-offset-4 md:ml-3 md:text-left">We email a confirmation to the hiring team.