About the Role
This role focuses on application, product, and infrastructure security, sitting at the intersection of security, platform, payments engineering, and infrastructure. You will shape Modern Treasury's risk management at scale and design systems for programmatic, compliant money movement. The ideal candidate will influence security strategy, drive DevSecOps automation, and contribute to architectural design, ensuring fast growth while maintaining trust, compliance, and safety.
Responsibilities
- Lead application security across the payment platform, including secure code review, threat modeling, and security architecture for new products.
- Own product security for new payment rails, including FBO account structures, stablecoin integration, and enhanced compliance features.
- Design and implement DevSecOps tooling and automation to improve security posture across CI/CD and infrastructure.
- Partner with engineering teams to embed security into the development lifecycle through automation, secure design patterns, and security champions.
- Drive security architecture decisions for customer-facing APIs, authentication systems, and data protection controls.
- Build monitoring and detection capabilities for application-layer threats, API abuse, and fraud patterns.
- Design infrastructure monitoring, automation, and remediation practices to ensure system resilience and trustworthiness.
- Collaborate with Compliance and Legal to ensure product features meet regulatory requirements (BSA/AML, KYC/KYB, state money transmission).
- Influence technical strategy across Product, Platform, and Infrastructure teams on security and risk management.
Requirements
- 6+ years in security engineering.
- 3+ years focused on application and product security.
- Strong experience with full-stack application security (frontend, backend, APIs).
- Strong experience with authentication and authorization systems and identity management.
- Strong experience with infrastructure automation related to security (AWS, Docker, CI/CD pipelines).
- Strong experience with fraud detection, prevention, and abuse mitigation in payment or financial products.
- Strong experience with Secure SDLC practices and developer security tooling.
- Experience with incident response and security monitoring.
- Knowledge and experience with application security for Ruby on Rails, GraphQL, JavaScript, React, and containerized environments.
- Payments engineering experience, including fraud prevention and risk controls in money movement systems.
Skills
- Application security
- Product security
- Secure code review
- Threat modeling
- Security architecture
- DevSecOps tooling
- Automation
- Secure design patterns
- Security champions
- API security
- Authentication systems
- Data protection controls
- Monitoring and detection
- Application-layer threats
- API abuse
- Fraud patterns
- Infrastructure monitoring
- Remediation practices
- Risk management
- Full-stack application security (frontend, backend, APIs)
- Authentication and authorization systems
- Identity management
- AWS
- Docker
- CI/CD pipelines
- Fraud detection
- Fraud prevention
- Abuse mitigation
- Secure SDLC practices
- Developer security tooling
- Incident response
- Security monitoring
- Ruby on Rails
- GraphQL
- JavaScript
- React
- Containerized environments
- Payments engineering
- Fintech
- PCI DSS
- BSA/AML
- KYC/KYB
- ACH
- Wires
- Card networks
- Chargeback prevention
- DevOps workflows
- Buildkite
- IaC
- AWS security automation
- Stablecoin security
- Blockchain integrations
- Crypto payment rails
- Postgres
- Tailwind CSS
- RegTech platforms
- Anti-fraud platforms
Location
- San Francisco
- New York
- Remote (AZ, CA, CO, CT, FL, GA, HI, IL, MA, MI, MN, MT, NC, NJ, NV, NY, OH, OK, OR, PA, TN, TX, UT, WA, WI)
Work Type
- Remote
Experience Level
- 6+ years in security engineering
- 3+ years focused on application and product security
- 2+ years in payments or fintech
About the Company
- Modern Treasury's mission is to build the most trusted financial infrastructure for global money movement.
- The company is expanding into new products for moving funds across traditional rails and emerging technologies, including stablecoins.
- Modern Treasury is the operating system for money movement, offering a payments platform with APIs and dashboards.
- The platform helps companies unlock new payments revenue, strengthen customer experiences, and drive efficiency.
- Its end-to-end platform provides faster payments, efficient workflows, and full data visibility.
Equal Opportunity
- Modern Treasury is committed to equal employment opportunity and does not discriminate based on race, color, creed, gender (including gender identity and gender expression), religion (all aspects of religious beliefs, observance or practice, including religious dress or grooming practices), marital status, registered domestic partner status, age, national origin or ancestry (including language use restrictions and possession of a driver’s license issued under California Vehicle Code section 12801.9), natural hair, physical or mental disability, political affiliation, medical condition (including cancer or a record or history of cancer, and genetic characteristics), sex (including pregnancy, childbirth, breastfeeding or related medical condition), genetic information, sexual orientation, military and veteran status or any other consideration made unlawful by federal, state, or local laws.
- It also prohibits unlawful discrimination based on the perception that anyone has any of those characteristics, or is associated with a person who has or is perceived as having any of those characteristics.
- Modern Treasury participates in E-Verify and will provide the federal government with your Form I-9 information to confirm that you are authorized to work in the U.S.
