Senior Application Security Engineer

At Félix, we're building the financial ecosystem for Latin immigrants in the U.S. Our core product is an AI-powered chatbot built on WhatsApp, allowing our users to send money home as easily as sending a text message. We're a hyper-growth Series B company, backed by over $100 million in funding from top-tier global investors.

Requirements

• Proven experience as an Application Security Engineer, Product Security Engineer, or in a similar role.
• Hands-on experience building, securing, and operating CI/CD pipelines, preferably with GitHub Actions.
• Strong proficiency with security scanning tools (e.g., SAST, DAST, SCA, secret scanning).
• Proficiency in a scripting or programming language, with a strong preference for Python to align with our primary tech stack.
• Deep understanding of web application vulnerabilities, secure architecture principles, and the OWASP Top 10.
• Experience working with cloud-native technologies and environments (GCP, Kubernetes/GKE, Docker).
• Experience in a regulated industry (Fintech, Healthcare, etc.) and familiarity with compliance frameworks like SOC 2 and PCI DSS.
• Experience with Infrastructure-as-Code tools like Terraform and related security scanners (e.g., Checkov).
• Familiarity with vulnerability management platforms like DefectDojo.

Benefits

• Competitive salary
• Initial stock options grant
• Annual performance bonus
• Health, dental, and vision plans
• Remote work environment
• Continuous learning opportunities
• Unlimited PTO
• Paid parental leave

Originally posted on Himalayas