Top Fintech Cybersecurity Jobs

Leads enterprise application security architecture across applications, APIs, cloud-native platforms, DevSecOps, and AI-enabled solutions. Performs threat modeling, architecture reviews, security assessments, and risk analysis; develops security standards, reference architectures, design patterns, and requirements. Advises on secure development, software supply chain security, cloud security, and application testing while mentoring technical teams and influencing enterprise security strategy in a regulated environment.

Lead technical design, deployment, automation, and operational maintenance of encryption, tokenization, and key management products (including HSMs). Provide technical leadership, run POCs, support audits and incident response, collaborate with vendors and internal teams, and oversee engineers to ensure secure, resilient cryptographic services and compliance with corporate policies.

Leads client cybersecurity engagements from needs assessment through solution delivery. Develops tailored cybersecurity strategies, assessments, wargames, awareness programs, and executive communications. Advises Commercial, Corporate, and Wealth Management clients, builds trusted relationships, identifies service expansion opportunities, and collaborates with internal cybersecurity teams. Contributes strategic expertise to the Cyber Defender Program and evaluates cybersecurity technologies, frameworks, and best practices. The role is hybrid and requires 5+ years of cybersecurity and information security experience.

Leads Mastercard’s technology risk and controls governance strategy, including control testing methodologies, risk-based prioritization, control integration, audit and regulatory support, executive reporting, and continuous maturity improvement. Partners with technology, risk, security, regulatory, and business stakeholders to standardize controls, automate processes, manage emerging technology risks, and strengthen enterprise compliance and operational resilience.

Leads enterprise AI security architecture and strategy across LLM applications, RAG pipelines, agent workflows, and cloud-native platforms. Establishes security standards, governance requirements, guardrails, threat models, and secure development patterns. Drives remediation of AI-specific risks including prompt injection, jailbreaks, data exposure, unsafe tool usage, and excessive permissions. Partners with senior engineering, product, architecture, and security leaders, leads investigations, supports automated security testing, represents AI security in governance forums, and mentors security engineers.

Manage and support privileged access management infrastructure, including HashiCorp Vault, CyberArk, PKI, and related systems. Provide operational support, troubleshooting, patching, upgrades, secrets lifecycle management, and user assistance. Design security architecture, enforce security-as-code practices, develop integrations and platform enhancements, and apply AI-based capabilities to improve detection and remediation. Collaborate cross-functionally to strengthen the organization’s cybersecurity posture.

Lead Affirm’s enterprise AI security review program, threat model LLM and agentic systems, review code and configurations, and develop security guardrails, tooling, policies, and monitoring. Evaluate AI-enabled SaaS vendors, identify emerging vulnerabilities, support incident response, and lead cross-functional initiatives across Security, Engineering, Legal, Privacy, and Compliance. The role requires expertise in AI security architecture, threat modeling, IAM, cloud infrastructure, policy-as-code, and regulated enterprise environments.

Builds and scales anti-fraud technology, automation scripts, workflows, dashboards, and reporting capabilities. Analyzes fraud trends, control gaps, incidents, and detection effectiveness; recommends improvements to reduce losses and manual effort. Partners with investigators, business teams, and leadership to provide technical guidance, transition capabilities into operations, maintain documentation, and support fraud technology projects. Coaches peers and applies regulatory and financial-crime risk knowledge to improve prevention and detection.

Own application security guardrails and tooling for a SaaS payment platform. Responsibilities include tuning SAST and SCA tools, integrating security checks into CI/CD pipelines, conducting manual web and API penetration tests, threat modeling, validating exploits, managing WAF and secrets security, triaging vulnerabilities, and reporting remediation metrics. The role partners closely with engineering, platform, and technology debt teams to reduce security risk while maintaining development velocity.

Owns end-to-end endpoint detection coverage, including telemetry requirements, behavioral detection engineering, alert deployment, tuning, and coverage gap analysis. The role develops Detection-as-Code rules, applies MITRE ATT&CK and threat research, leverages AI and machine learning, collaborates with security operations and threat intelligence teams, and mentors engineers. Responsibilities include endpoint log analysis, EDR engineering, adversary emulation alignment, risk communication, compliance documentation, and high-fidelity detection development at enterprise scale.

Monitors and investigates security events and alerts across SIEM, IDS/IPS, malware prevention, and system-log sources. The analyst detects and analyzes threats, responds to incidents, remediates or escalates issues, coordinates with business and technology teams, maintains case records, monitors security-product tickets, and develops documentation, reports, procedures, and security-control expertise.

Own vulnerability management across endpoints, servers, and cloud infrastructure; prioritize remediation and track SLA performance. Harden AWS environments, improve identity management, investigate cloud alerts, and support application security through SAST, DAST, dependency scanning, secure code reviews, and threat modeling. Resolve security tickets, document incidents and remediation, and lead security initiatives while collaborating with engineering, IT, and compliance.