{"id":2118999,"url":"https://alion.io/job/thunes-security-engineer","title":"Security Engineer","company":{"id":5845,"name":"Thunes","domain":"thunes.com","url":"https://alion.io/company/thunes","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"B","score":80,"open_postings":5,"ghost_share":0,"stale_share":0.8,"repost_share":0,"time_to_fill_p50_days":48,"computed_at":"2026-11-06T05:58:05Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["San Francisco, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":125000,"max_usd":284000,"period":"year","method":"role_country_seniority_unknown","sample_n":3638},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"GCP","optional":false},{"name":"GitHub Actions","optional":false},{"name":"GitLab CI","optional":false},{"name":"Jenkins","optional":false},{"name":"Kubernetes","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Python","optional":false},{"name":"SOC 2","optional":false}],"status":"live","first_seen_at":"2026-04-09T20:01:05Z","employer_posted_date":"2026-09-21","last_verified_at":"2026-11-07T01:34:05Z","board_verified":true,"closed_at":null,"days_open":211,"trust":{"level":"stale","repost_count":0,"flags":["stale"],"days_open":210},"description":"Security Engineer Overview\nThunes Financial Services is hiring a Security Engineer to be the architect of trust for our fintech platform. We are looking for a hybrid specialist who can bridge the gap between Infrastructure Security and Application Security, ensuring our systems are as resilient as they are compliant. This role will play a critical part in maintaining our regulatory compliance posture while building automated, scalable security guardrails. This role reports to the VP of Engineering.\nThe Role\nAs a Security Engineer, you will be responsible for security across the full lifecycle of our fintech platform. This hybrid specialist role requires deep engagement with both infrastructure and application security, focusing heavily on automation and regulatory compliance within a high-stakes, regulated environment.\nDay-to-day:\n CI/CD Security Integration: Design, build, and maintain automation to integrate security testing (SAST/DAST/SCA) directly into our deployment pipelines. You'll ensure that security is a \"paved road\" for developers, not a bottleneck.\n Full-Stack Security: Own security across the lifecycle-from securing our cloud infrastructure (AWS/GCP) to performing code reviews and architectural risk assessments.\nVulnerability Management: Manage our detection stack using modern vulnerability scanning and dependency management tools to identify, prioritize, and track risks across the environment.\nSecurity Automation: Build and maintain automated workflows for vulnerability reporting, triage, and remediation. We want someone who leverages AI-powered agentic coding tools or similar automation to eliminate manual toil and accelerate response times.\nCompliance Engineering: Monitor our technical security controls to ensure that they are operating effectively throughout the year to meet the rigorous cybersecurity compliance requirements to support regulatory exams as well as SOC-2 and PCI audits.\nIncident Response: Serve as a key member of our security response team, helping to investigate and mitigate potential threats.\nCollaborate with:\nProduct, data engineering, front-end engineering, tech ops, compliance, and legal\nTech stack:\nCloud (AWS/GCP, K8s), CI/CD tools (GitHub Actions, GitLab CI, or Jenkins), Python, Go, or Bash, SAST/DAST/SCA, enterprise vulnerability management platforms, automated dependency scanning solutions.\nSuccess in this role means:\nEnsuring systems are resilient and compliant.\nMaintaining our regulatory compliance posture.\nBuilding automated, scalable security guardrails.\nHaving a direct impact on the security strategy.\nTravel:\nSome travel required for periodic team offsites.\nKnowledge Required\nQualifications\nA Bachelor's degree in Computer Science or a related field, but similar professional experience is equally valued. \nExperience\nA proven track record of deep experience in both Infrastructure Security and Application Security is required.\nTechnical skills:\n Pipeline Proficiency: Hands-on experience building security guardrails within CI/CD tools (e.g., GitHub Actions, GitLab CI, or Jenkins).\n Hybrid Expertise: Deep experience in both Infrastructure Security (Cloud/K8s) and AppSec (OWASP Top 10, Secure SDLC).\nTooling Experience: Proven proficiency with enterprise vulnerability management platforms and automated dependency scanning solutions.\n Automation Mindset: You don’t just find bugs; you write code (Python, Go, or Bash) to handle them. Experience using AI-driven automation or agentic tools to streamline security workflows is required.\n Fintech Fluency: You understand the high-stakes nature of working in a regulated environment and can translate compliance requirements into technical reality.\nLeadership and collaboration:\nClear, effective communication of trade-offs to non-technical stakeholders\nHistory of collaboration with engineers and others\nNice to have but in no way required:\nCertifications such as CISSP\nPrior experience in startups, especially Fintech","description_format":"text","description_chars":3963,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Payment Processing & Gateways","Money Transfer & Remittances"],"lifecycle":[{"event":"open","at":"2026-10-08T23:51:27Z"}],"visa":[],"liveness":{"score":8,"band":"cold","label":"Long shot","p_open":1,"p_active":0.295,"p_room":0.28,"age_days":210,"expected_fill_days":48,"reasons":["conf:2","velocity","win:tail","crowd:"],"computed_at":"2026-11-06T05:58:05Z"},"pay":null,"html_url":"https://alion.io/job/thunes-security-engineer","json_url":"https://alion.io/job/thunes-security-engineer.json","meta":{"generated_at":"2026-11-07T02:20:46Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":5498,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-08T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":5845},"rest":"https://alion.io/mcp/rest/get_company?id=5845"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fthunes-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fthunes-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fthunes-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/thunes-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fthunes-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":2118999}},{"tool":"search_jobs","arguments":{"company":"thunes.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":2118999},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}