Top Fintech Cybersecurity Jobs

Own and implement Sandbar’s backend security, including encryption, key management, confidential computing, identity, secrets, supply-chain security, incident response, compliance, and data-handling controls. Build features in Python real-time services, conduct threat modeling and design reviews, and guide secure engineering practices. The role requires deep cloud security, applied cryptography, production incident response, and backend ownership, with confidential computing and mobile or device security experience preferred.

Leads vulnerability management, threat hunting, incident response, security monitoring, and risk mitigation. Evaluates security controls and solutions across on-premises and cloud environments, supports audits and regulatory compliance, and advises technical and business teams on information security requirements. The role also develops security processes, manages antivirus, malware, and DLP policies, trains colleagues on cyberattack tactics, mentors junior staff, and escalates unresolved security issues to leadership.

Leads the strategy and execution of incident response, detection engineering, threat hunting, and cyber threat intelligence. Serves as senior incident commander, oversees digital forensics and root cause analysis, builds enterprise logging and telemetry pipelines, and manages complex cloud, network, endpoint, identity, and application security operations. The role manages senior technical teams, addresses AI-related cyber threats, and briefs executive leadership during critical incidents.

Directs information security strategy with a focus on identity and access management, application security, GRC, risk assessments, third-party security, regulatory compliance, policies, and security initiatives. Provides security consultation, oversees controls and change management, supports GLBA, PCI, SOX, and Bank Secrecy Act compliance, and supervises security personnel.

Manage enterprise vulnerability and penetration testing, analyze scan results, validate findings, prioritize risks, coordinate remediation, and support incident response. The role maintains security platforms, documents compliance and risk processes, communicates vulnerabilities and mitigation strategies to technical and executive stakeholders, evaluates emerging threats and security technologies, and partners with technology teams to reduce organizational risk.

Conduct penetration tests across infrastructure, networks, web and mobile applications, and cloud environments. Perform application and cloud security testing, simulate adversary techniques, develop custom security tools, document vulnerabilities, validate remediation, and support HIPAA, SOC 2, and PCI DSS compliance. Collaborate with engineering and product teams, track emerging threats, and contribute to purple-team exercises, tabletop events, and security training.

Serve as the embedded product security SME, owning threat modeling, security architecture, secure coding practices, testing coordination, vulnerability remediation, and vendor/cloud risk. Translate policy into controls, monitor Key Risk Indicators, deliver security artifacts to review boards, and drive risk reduction across product technology supply chains while partnering with Tech Leads, Business Architects, and risk teams.

Paid summer cybersecurity internship supporting IAM, technology assurance, and cybersecurity operations teams. Responsibilities include security policy reviews, tool and vendor assessments, security event response, security tooling administration, audit and assessment support, and authentication and authorization solutions. Candidates will collaborate across IT departments and apply analytical, organizational, communication, testing, and confidentiality skills while gaining practical cybersecurity experience.

Lead enterprise security architecture across cloud, application, infrastructure, identity, data, and third-party environments. Develop security principles, standards, patterns, and controls; review designs; conduct threat modeling and risk assessments; guide secure-by-design implementations; and advise technical and business stakeholders. The role also supports regulatory compliance, evaluates security technologies, and strengthens organizational security practices.

Own and mature Nova Credit’s information security program across technical security operations and GRC. Configure and operate EDR, MDM, IAM, DLP, and cloud security tooling; investigate alerts and vulnerabilities; harden systems; and support AWS security. Manage customer security questionnaires, SOC 2 and ISO 27001 audits, control evidence, policies, and third-party risk reviews. Partner with Engineering, Product, and Data Science on security initiatives, risk remediation, and program strategy.