Top Fintech Cybersecurity Jobs

Lead the technical vision, architecture, and roadmap for Circle’s identity and access platform. Manage and develop backend and frontend engineers, guide architectural changes, review designs and code, troubleshoot production issues, participate in incident response, and partner with Security, Product, Risk, and engineering teams. The role focuses on authentication, authorization, customer and agent identity, secure delegation, platform reliability, migrations, and operational readiness.

Leads enterprise network security architecture, engineering, and modernization across cloud and on-premises environments. Designs firewalls, WAF, DDoS protection, Azure connectivity, microsegmentation, Zero Trust, SASE, and SD-WAN solutions. Serves as a Level 3 incident escalation point, drives root-cause analysis and resilience improvements, establishes automation and DevSecOps standards, and mentors engineers. Partners with stakeholders and vendors to deliver secure, scalable network security platforms.

The Senior Cybersecurity GRC Analyst will automate governance, risk, and compliance workflows, including evidence collection, control testing, risk reporting, and compliance questionnaires. The role supports IGA implementation, access reviews, phishing programs, Trust Center management, and integrations across GRC, identity, ticketing, and security tools. Responsibilities include aligning controls with NIST, PCI-DSS, SOC 2, and SOX, optimizing the security technology stack, developing automation roadmaps, and presenting risk insights to leadership.

Provides legal counsel on cybersecurity, data security, incident response, technology risk, regulatory requirements, operational resilience, third-party risk, open-source software, and technology agreements. Advises senior leaders during cyber incidents, supports regulatory notifications and crisis management, drafts cybersecurity policies and playbooks, guides red-team exercises, and negotiates technology, cloud, software, and data-security contracts.

Build and maintain network edge security systems that improve API security posture, detect and mitigate abusive traffic, and respond to emerging threats. Responsibilities include developing streaming analytics pipelines, integrating CDN and security vendors, managing production systems, contributing to machine learning models, and implementing AI-driven traffic classification. The role requires software or security engineering experience, expertise in Java, Kotlin, TypeScript, Python, SQL, Spark, CDN platforms, and AWS.

Leads security operations, including threat detection, monitoring, incident response, vulnerability management, threat hunting, and security automation. Manages and mentors security engineers, develops playbooks and SOPs, supports audits and compliance frameworks, and partners with IT, DevOps, Infrastructure, and Engineering teams to improve security posture and risk management.

Monitor and triage security alerts, investigate logs, track vulnerabilities, support SOC 2 compliance, maintain IAM, certificates, and WAF rules, and assist with AWS administration, CI/CD deployments, and automation scripting.

Owns the InfoSec-wide program roadmap and drives cross-team security initiatives, including tooling implementations, audits, penetration tests, and M&A security integrations. Coordinates stakeholders across security, IT, Engineering, Legal, and Corporate Development; manages Jira visibility, dependencies, risks, and executive reporting. The role requires broad technical fluency across security domains, strong program tracking, and effective escalation and communication skills.

The Senior Security Engineer supports application security, vulnerability assessments, penetration testing, code reviews, security training, and secure SDLC practices. Responsibilities include third-party risk assessments, audit evidence collection, policy and compliance support, vulnerability research, incident response, security metrics, and remediation tracking. The role also administers security-system access, collaborates cross-functionally, guides junior engineers, responds to inquiries, and participates in a rotating one-week-per-month on-call schedule.

Own application security for backend services, APIs, cloud infrastructure, and edge systems handling financial transactions. Responsibilities include validating red-team findings, assigning severity, hardening services, implementing WAF and rate-limiting defenses, creating automated security configuration checks, expanding pull-request security gates, reviewing architectures, managing attack-surface coverage, and evaluating security tools. The role also partners with engineers and Security Operations to drive effective remediation.