Top Fintech Cybersecurity Jobs

Drive application security by running SAST/SCA, threat modeling, vulnerability management, and remediation. Advise on secure architecture, train engineers, support pentests/bug bounties, and administer AWS Control Tower and IAM. Innovate with AI to improve AppSec tooling and practices.

Lead and scale Capcos Cyber + AI practice: define strategy and offerings, win and deliver complex cybersecurity and AI-enabled security programs, manage client relationships, drive pursuits and revenue, and mentor and grow teams.

The Principal Security Engineer will lead the design, implementation, and integration of advanced Identity solutions for security in a fintech environment, transforming identity governance to support a dynamic risk-aware architecture. Responsibilities include strategy development, system architecture, secure integration with various platforms, and collaboration with engineering teams.

Own and architect Forward's security technology stack across AppSec, SecOps, and GRC. Design integrations with Engineering/IT, lead tool evaluations and PoCs, automate controls with infrastructure-as-code and detection-as-code, build centralized logging/SIEM and identity governance, align architecture to security frameworks, mentor security engineers, and support incident response and remediation.

The Advisor Red Team will conduct threat emulation, perform penetration tests, and assess organizational security against cyber threats while collaborating with teams to enhance overall security posture.

The Cyber Security Engineer Co-Op will support IEX's Information Security team, gaining hands-on experience in compliance, operational tasks, and security programs while contributing to security initiatives.

Lead end-to-end IT audits globally to assess design and operating effectiveness of internal controls across technical platforms. Provide actionable recommendations, drive change, write clear reports, build relationships, and travel internationally (~25%).

Lead application and cloud security within DevSecOps: own CI/CD security controls, manage vulnerability lifecycle, tune SAST/DAST/SCA tooling, enforce IaC and cloud security best practices, run threat modeling and security reviews, automate DevSecOps operations, and support incident response and security documentation.

Owner of vulnerability management, cloud (AWS) security hardening, identity improvements, and AppSec integration. Triage and track findings to remediation, maintain metrics and documentation, support SAST/DAST/SCA in CI/CD, handle security ticketing/SOAR duties, lead security projects, and collaborate with engineering, IT, and compliance.

Lead IT and information security audits, perform walkthroughs and control testing, document findings, supervise audit staff and consultants, support SOX Section 404 compliance, apply COSO/COBIT/NIST/IIA frameworks, and partner with management to strengthen controls and reduce risk.