Senior Engineer, Security
Taptap Send9 hours ago
Responsibilities
- Remediate infrastructure and application security findings by writing Terraform and application changes, and drive fixes through other teams when needed.
- Run vulnerability management from Snyk, Prowler, and ASV findings through verified remediation.
- Own AWS security across IAM, least privilege, network boundaries, secrets management, logging coverage, host hardening, and WAF configuration.
- Define and enforce security baselines and deployment patterns as code for new services.
- Conduct penetration testing, threat modeling, and security reviews for new services and external integrations.
- Serve as technical lead for security incidents, including forensic investigation.
- Own and improve detection coverage in Datadog by tuning alerts for meaningful signals.
- Secure CI/CD pipelines, including GitHub Actions, and manage cryptography, key rotation, and certificate lifecycles.
Requirements
- Five or more years of hands-on security engineering experience with responsibility for production systems.
- Ability to write and ship Terraform and Python code, with enough application fluency to remediate vulnerabilities directly.
- Deep AWS security experience, including organization-scale IAM and least privilege.
- Experience securing container workloads in ECS or EKS.
- Application security expertise, including threat modeling and hands-on offensive testing against cloud and application targets.
- Security incident response and forensic investigation experience.
- Experience running vulnerability management and driving remediation across teams without direct authority.
- Experience working in a regulated environment and translating ISO 27001, PCI DSS, or SOC 2 requirements into engineering work.
- Detection engineering experience in Datadog or a comparable SIEM.
- Experience securing CI/CD pipelines, particularly GitHub Actions.
- Practical cryptography and secrets management experience, including key rotation and certificate lifecycle management.
- Experience using AI coding tools to remediate issues at scale and reviewing AI-generated code from a security perspective.
- Experience with payments, cards, or digital assets.
Benefits
- The role is part of a truly global team spanning more than 50 nationalities and 50 languages.
- The employer is an equal opportunity organization that supports an inclusive and diverse workforce.
- Reasonable adjustments are available during the recruitment process.
About Taptap Send
Taptap Send builds a mobile remittance app that lets immigrants send money to family in emerging markets, with transfers to Africa, Asia, and Latin America. The company earns revenue from foreign-exchange spreads and select transfer fees. Founded in 2018 and headquartered in New York, it is privately held and operates in multiple sender countries across North America and Europe.