Security Engineer

Skip to main contentWin as One Team.Sign InSecurity Engineer page is loadedSecurity EngineerApplylocationsMetro 9 - West Valley CityTexasArizonaColoradoCaliforniatime typeFull timeposted onPosted 30+ Days Agojob requisition idR-2757Company Overview:At Snap Finance, we believe everyone deserves access to the things they need, regardless of credit history. Since 2012, we've used data, machine learning, and a more human approach to create flexible financing solutions that help people move forward. We're proud of our inclusive, supportive culture, built on empowering our customers, partners, and team members alike. When our people thrive, so does our innovation.If you're looking to make an impact and grow with a team that values you, come join us!Job DescriptionWe’re looking for a Security Engineer to serve as a key technical expert on our Infrastructure Security Operations team. This role owns the day-to-day security of our multi-region AWS environment, including security tooling, incident response, vulnerability management, and automation.You’ll write code to eliminate manual work, leverage AI-native tools to improve efficiency, and help raise the technical bar across a growing team. In addition to operational ownership, you’ll support security metrics, compliance, and executive/board reporting.This role requires occasional after-hours support for critical security incidents and reports directly to the CISO.How you’ll make an impact:Secure and Operate the Cloud EnvironmentOwn cloud security posture across multi-region AWS environments — continuously assess, harden, and improveOperate the full security toolset: CSPM, SIEM, vulnerability management, network security, ZTNA, DLP, EDR, and endpoint managementDrive the vulnerability management lifecycle end to end: scan cadence, prioritization, remediation SLAs, and reportingManage identity and access infrastructure in collaboration with IT, spanning MFA, IAM, IGA, privileged access, and credential managementLead the buildout of a Privileged Access Management (PAM) programSupport ongoing cloud migration security workstreamsMonitor threat intelligence and external attack surface signals; translate findings into prioritized actionLead and Respond to IncidentsServe as a primary responder for security incidents — triage, contain, eradicate, and recover with urgency and disciplineOwn incident response process maturity: playbook development, evidence chain of custody, forensic readiness, and post-incident reviewsBe available for occasional after-hours response when critical incidents ariseBuild, Automate, and Elevate the TeamSet the coding and AI standard for the InfraSecOps team — write tools, automate workflows, and actively mentor peers in modern security engineering practicesBuild and maintain automation for alert triage, compliance evidence collection, asset inventory, and security metricsDevelop API integrations between security tools to eliminate manual handoffs and improve data fidelityContribute to security-as-code practices: IaC security reviews, CI/CD pipeline hardening, and software supply chain controlsChampion AI-native tooling across the team; evaluate and implement AI-assisted detection, threat hunting, and response capabilitiesBuild and contribute to Agentic AI frameworks within the security programStay current on AI security risks — prompt injection, model abuse, shadow AI — and turn awareness into practical controlsOwn the Security Program Within Your DomainMaintain the security program roadmap and key results for your domain, including compliance attestation timelines and remediation SLA adherenceTrack and mature the security tool portfolio: monitor adoption, measure effectiveness, and drive continuous improvementMaintain risk registers and GRC platforms; ensure findings are triaged and resolved within SLACoordinate audit evidence collection for SOC 2 Type II, PCI DSS 4.0, and CyberEssentials+Contribute to executive and board-level security reporting — translate...