5 months ago
Base Salary
$145k - $195k/yr
Responsibilities
- Stand up and operate the company’s SIEM and build a SecOps dashboard covering alerts, anomalies, authentication events, infrastructure changes, and audit-ready evidence.
- Run continuous internal penetration tests against services, APIs, infrastructure, and embedded SDKs.
- Use Claude Security and Claude Code to automate reconnaissance, fuzzing, code review, and exploit development.
- Document security findings, drive remediation, and measure mean time to fix.
- Own the vulnerability lifecycle, including CVE triage, Dependabot tuning, lockfile hygiene, and gated automatic merges for low-risk dependency upgrades.
- Define secure-by-default patterns, review threat models, and integrate SAST, DAST, and secret scanning into CI.
- Partner with compliance on evidence, controls, and monitoring artifacts required for PCI DSS, SOC 2, ISO 27001, and DORA audits.
Requirements
- 4+ years of experience in security engineering, product security, or DevSecOps, ideally in fintech, payments, or another regulated environment.
- Strong hands-on offensive security experience, including web application, API, cloud, and infrastructure penetration testing.
- Production experience operating a SIEM and building useful security dashboards; examples include Datadog, Splunk, Elastic, and Panther.
- Fluency in TypeScript and Node, plus familiarity with Rust, Go, or Python sufficient to review code and build security tooling.
- Experience with vulnerability management at scale, including CVE triage, software composition analysis tooling, and dependency upgrade automation.
- Comfort with AI-native tooling such as Claude Code and Claude Security, or genuine enthusiasm to learn it.
- Bias toward shipping practical security controls quickly.
Benefits
- Health and wellness benefits
- 401(k) savings plan
- Flexible time off
- Eligible for an equity grant
About Coinflow
Coinflow is a Chicago-based payment service provider for marketplaces, fintechs, remittance providers, gaming platforms, and e-commerce merchants, offering instant settlement using stablecoins. Its platform combines global pay-ins, multi-currency FX, unified payouts, AI-driven fraud prevention, and chargeback indemnity, sold via transaction-based processing. Founded in 2023, Coinflow announced a Series A led by Pantera Capital in October 2025.