Top Fintech Cybersecurity Jobs

Build and operate security detection and response capabilities across infrastructure. Responsibilities include developing SIEM alerts and integrations, administering detection tools, participating in security on-call rotations, automating triage workflows, supporting incident investigation and containment, and improving response playbooks. The role also focuses on detecting AI-related risks, increasing visibility into AI tool usage, reviewing telemetry needs for new systems, and collaborating with engineering and governance teams.

Lead secure deployment and operation of AI and ML systems, including AI gateways, policy orchestration, security automation, and infrastructure-as-code controls. Establish an AI red-teaming program addressing prompt injection, jailbreaks, model extraction, poisoning, data leakage, and supply-chain risks. Own the AI security roadmap, advise senior leadership, apply the OWASP LLM Top 10, partner with platform teams, mentor engineers, and provide vulnerability remediation guidance.

Lead fomo’s application security program through architecture reviews, threat modeling, secure SDLC implementation, code reviews, penetration testing, vulnerability management, security tooling, and incident response. Establish authentication, authorization, API security, and data protection standards; manage pentest and bug bounty relationships; mentor engineers; and define the AppSec roadmap and metrics.

Develop and mature application security practices through manual code reviews, SAST/DAST and related security tooling, penetration testing, CI/CD automation, threat modeling, and vulnerability reporting. Partner with engineering, cloud, and product teams to implement secure SDLC processes, expand Security Champions programs, secure AI/LLM features, and mentor teams on secure design and coding.

Designs and reviews secure architectures for cloud, applications, data, APIs, identity systems, AI/ML implementations, and third-party integrations. Leads threat modeling, security standards, reference architectures, risk assessments, and compliance alignment across AWS, Azure, and GCP environments. Protects traveler and payment data, defines AI and identity security guardrails, supports vendor due diligence, and advises engineering, product, and executive stakeholders on practical risk mitigation.

Lead enterprise red team operations and adversary simulations across applications, cloud infrastructure, identity systems, and AI platforms. Conduct advanced penetration testing, source code and architecture reviews, cloud security assessments, and AI red teaming. Develop custom offensive tools, automated CI/CD security validation, attack playbooks, and evidence-based reports. Partner with engineering, AppSec, SOC, and detection teams to improve security, validate remediation, mentor personnel, and advise leadership on systemic risks and emerging threats.

Leads company-wide security, privacy, and compliance strategy for AI products and cloud infrastructure. Builds security programs, manages risk and incident response, oversees GLBA, FFIEC, and SOC 2 compliance, embeds secure architecture and DevSecOps practices, governs AI security and privacy, reports risk to executives and the board, and builds a high-performing security engineering team.

Plans and executes full-scope red team and adversary emulation operations, including phishing, C2, privilege escalation, lateral movement, EDR/XDR evasion, Active Directory and cloud compromise, and social-engineering scenarios. Develops custom offensive tooling, collaborates with Blue Teams to validate detections, documents attack chains, and provides remediation guidance. Requires 5+ years of offensive security experience, advanced scripting skills, and recognized offensive security certifications, with bug bounty or CTF achievements preferred.

Leads hands-on security architecture and implementation for AWS cloud, software delivery, applications, and AI platforms. Builds secure-by-default Terraform/OpenTofu controls, identity and access patterns, CI/CD protections, vulnerability management, threat models, AI security evaluations, detection mechanisms, and incident remediation. Partners with engineering, CyberOps, Identity, GRC, and Privacy teams while mentoring engineers and translating security requirements into automated, reusable guardrails.

Supports technology audit engagements by testing IT general controls, SOX controls, cloud controls, cybersecurity and AI governance controls. Prepares audit workpapers, applies data analytics to access and activity records, evaluates controls against recognized frameworks, drafts recommendations, and communicates findings to stakeholders.