6 months ago
Base Salary
$145k - $195k/yr
Responsibilities
- Stand up and operate the SIEM and build a real-time SecOps dashboard covering alerts, anomalies, authentication events, infrastructure changes, and audit-ready evidence.
- Conduct continuous internal penetration testing against services, APIs, infrastructure, and embedded SDKs, including reconnaissance, fuzzing, code review, and exploit development.
- Document security findings, drive remediation, and measure mean time to fix.
- Own vulnerability management, including CVE triage, dependency upgrades, Dependabot tuning, lockfile hygiene, and gated auto-merge for low-risk updates.
- Define secure-by-default development patterns, review threat models, and integrate SAST, DAST, and secret scanning into CI.
- Partner with compliance to produce evidence, controls, and monitoring artifacts for PCI DSS, SOC 2, ISO 27001, and DORA audits.
Requirements
- At least 4 years of experience in security engineering, product security, or DevSecOps, ideally in fintech, payments, or another regulated environment.
- Strong hands-on offensive security experience, including web application, API, cloud, and infrastructure penetration testing.
- Production experience operating a SIEM and building security dashboards; experience with Datadog, Splunk, Elastic, Panther, or similar is relevant.
- Fluency in TypeScript and Node.js, plus working familiarity with Rust, Go, or Python.
- Experience with vulnerability management at scale, including CVE triage, software composition analysis tooling, and dependency upgrade automation.
- Comfort using AI-native security tooling such as Claude Code and Claude Security, or genuine enthusiasm to learn it.
- Ability to ship practical security controls and work effectively across the engineering organization.
Benefits
- Base salary range of $145,000 to $195,000 USD.
- Equity grant eligibility.
- Health and wellness benefits.
- 401(k) savings plan.
- Flexible time off.
About Coinflow
Coinflow is a Chicago-based payment service provider for marketplaces, fintechs, remittance providers, gaming platforms, and e-commerce merchants, offering instant settlement using stablecoins. Its platform combines global pay-ins, multi-currency FX, unified payouts, AI-driven fraud prevention, and chargeback indemnity, sold via transaction-based processing. Founded in 2023, Coinflow announced a Series A led by Pantera Capital in October 2025.