Senior Engineer, Security
Taptap Send1 month ago
Responsibilities
- Remediate infrastructure and application vulnerabilities by writing Terraform and application changes and driving fixes owned by other teams.
- Run vulnerability management from Snyk, Prowler, and ASV findings through verified remediation.
- Own AWS security across IAM, least privilege, network boundaries, secrets management, logging, host hardening, WAF configuration, and secure deployment patterns.
- Define and enforce security baselines as code for new services and container workloads.
- Conduct penetration testing, threat modeling, and security reviews for new services and payment or custody integrations.
- Serve as technical lead for security incidents, including forensic investigations.
- Own and improve Datadog detection coverage and tune alerts for meaningful signals.
- Secure CI/CD pipelines, particularly GitHub Actions, and use AI coding tools to support remediation at scale.
Requirements
- Five or more years of hands-on security engineering experience with responsibility for production systems.
- Ability to write and ship code using Terraform and Python, with enough application fluency to remediate findings directly.
- Deep AWS security experience, including organization-scale IAM and least privilege and container workloads in ECS or EKS.
- Application security experience including threat modeling and hands-on offensive testing against cloud and application targets.
- Security incident response experience including forensic investigation.
- Experience running vulnerability management and driving remediation across teams without direct management authority.
- Experience in a regulated environment translating ISO 27001, PCI DSS, or SOC 2 requirements into engineering work.
- Detection engineering experience in Datadog or a comparable SIEM.
- Experience securing CI/CD pipelines, particularly GitHub Actions.
- Practical cryptography and secrets management experience, including key rotation and certificate lifecycle management.
- Experience using AI coding tools for remediation and reviewing AI-generated code from a security perspective.
- Experience with payments, cards, or digital assets.
Benefits
- The company describes a truly global team with 250+ people, 50+ nationalities, and 50+ languages.
- Taptap Send is an equal opportunity employer and supports reasonable adjustments during the recruitment process.
About Taptap Send
Taptap Send builds a mobile remittance app that lets immigrants send money to family in emerging markets, with transfers to Africa, Asia, and Latin America. The company earns revenue from foreign-exchange spreads and select transfer fees. Founded in 2018 and headquartered in New York, it is privately held and operates in multiple sender countries across North America and Europe.