Join Blossom!
We are a U.S.-based company with over 20 years of experience dedicated to enhancing the satisfaction of credit unions and their members. We are committed to developing simpler and more innovative financial services that assist credit unions in serving their current members and attracting new ones. We are building the next-generation technology layer for credit unions.
www.blossom.net
We're looking for a technically driven and detail-oriented Cybersecurity Engineer with a strong interest in protecting scalable digital products, who thrives in cross-functional environments and drives security outcomes through deep technical expertise, sound risk judgment, and effective collaboration across product, infrastructure, and engineering teams.
About the RoleWe are looking for a senior security professional responsible for designing, implementing, and maintaining security policies and procedures to ensure Security Compliance and protect the company from data loss and cybersecurity risks. This person will act as the top technical security authority, defining cybersecurity strategy at both the Product and Infrastructure layers.
Key ResponsibilitiesSecurity Strategy & Architecture
- Implement strategies and define plans around cybersecurity at the Product and Infrastructure layers.
- Design and define long-term security architecture across systems, networks, and applications.
- Align security practices with enterprise-wide IT strategies and business goals.
- Drive secure-by-design principles and influence platform, infrastructure, and software design.
- Identify immediate and potential risks, and develop mitigation strategies while continually monitoring and evaluating security measures.
Technical Authority & Mentorship
- Serve as the top technical security authority, providing deep expertise in areas such as cryptography, authentication, secure coding, and vulnerability management.
- Lead security-focused design and code reviews for complex systems.
- Provide training and guidance to Directors, Engineering Managers, Technical Leads, Senior Developers, and Mid-level Developers.
- Mentor junior and senior security engineers, setting coding and security standards.
Risk & Incident Management
- Conduct threat modeling for new projects and high-risk services.
- Evaluate and prioritize security risks in both development and production environments.
- Collaborate with product, infrastructure, and development teams to mitigate identified risks.
- Lead investigations of complex security incidents, including root cause analysis and mitigation strategies.
- Guide post-incident reviews and ensure systemic improvements are implemented.
Automation, Tools & Compliance
- Develop and implement automation tools for continuous security monitoring, vulnerability scanning, and compliance enforcement.
- Evaluate and integrate third-party security solutions.
- Ensure systems comply with regulatory requirements such as PCI-DSS, SOC 2, or ISO 27001.
- Work closely with legal and compliance teams to maintain policies and audit-readiness.
Cross-functional Collaboration
- Act as a security liaison across engineering, product, operations, and leadership.
- Partner with DevOps/SRE teams to secure CI/CD pipelines and infrastructure-as-code.
- Promote security culture by leading internal training and awareness campaigns.
- Develop documentation and internal playbooks for the Secure Development Lifecycle (SDLC).
Monitoring & Threat Intelligence
- Oversee implementation of real-time intrusion detection, SIEM, and anomaly detection systems.
- Continuously refine monitoring rules and alerts based on evolving threats.
- Stay ahead of emerging threats, vulnerabilities, and mitigations.
- Prototype new security techniques, contribute to open source, and represent the company at security conferences when applicable.
Perks
- 100% Remote work
- Compensation in USD
- Flexible working hours (results-oriented, not time-based)
- Performance-based bonuses
- Paid time off (PTO)
- Learning & development budget (courses, certifications, events)
- Work with international teams and global products
- High ownership and autonomy in product decisions
- Opportunity to grow into Lead / Head of Product roles
- Access to AI tools and innovation-driven environment
Apply Now!
What We Do
Blossom is a growing ecosystem of fully integrated core banking, digital banking and payments solutions. Born in the cloud and reimagined with credit unions to replace outdated systems and patchwork tools, one vendor at a time. Founded in 2020, Blossom acquired HomeCU in the same year, went live with its new platform in 2023 and acquired CUProdigy in 2024. Today, the company serves close to 400 credit unions, thousands of employees and millions of members. Headquartered in Ogden, UT and Coral Gables, FL, Blossom is on a mission to build the first intelligent banking system that puts credit unions at the center of their members' financial lives, helping local communities thrive and transforming the way people experience money.
