Security Software Engineer

About the Team: HIFI's engineering team builds the payments infrastructure that fintechs and financial institutions use to move money on stablecoin rails. The team owns the APIs, ledger, and on-chain systems behind every payment HIFI processes, and works closely with product and compliance to make sure that infrastructure is reliable, secure, and ready for regulated use. As HIFI's volume grows and more institutions build on our platform, this team will decide how stablecoin payments hold up at the scale and standard that traditional financial infrastructure is held to. As a Security Engineer at HIFI you will help own the security of our company and the infrastructure behind our payments products day to day. You'll build HIFI's security program from the ground up, including identity and access management, endpoint security, and the cloud and network controls that protect our systems and data. This is a hands-on role with real ownership: you'll set the security roadmap based on risk, put core capabilities like monitoring, incident response, and secrets management in place, and write the policies that govern how HIFI handles access and information. You'll also be the person the team relies on to keep HIFI ready for audits and partner security reviews as we expand into more regulated markets. What you will build Design and implement the HIFI security roadmap from first principles to production, prioritizing by risk. Lead threat modeling and hardening for our money movement systems. Build core security capabilities, including monitoring and detection, incident response, secrets management, API security, and CI/CD hardening. Own cloud and network security architecture, including segmentation, encryption, and least-privilege access. Own endpoint and identity security across our devices and SaaS tools. Reinforce engineering best practices around secure development and infrastructure. Write and maintain information security policies and procedures. Ensure HIFI meets information security compliance and audit expectations as we scale to more regulated markets. Collaborate with engineering, product, compliance, and leadership to move fast without compromising safety. You might be a fit if 6+ years of experience in security engineering. Deep, hands-on AWS and network security experience, with infrastructure managed in Terraform. Experience owning security controls in a regulated environment, such as payments or financial services. Strong web application and API security skills, including modern authentication and authorization. Experience writing audit-ready policies and procedures. Experience building security practices from the ground up in a fast-paced startup. Comfort writing and debugging backend code, ideally Java Script/Type Script. Hands-on experience with SIEM, MDM, and database security, especially Postgres. A builder's mindset: you ship practical fixes quickly and know when good enough is safe enough. Interest in stablecoins and their potential to change how money moves around the world. Why This Role MattersHIFI moves billions of dollars for banks and fintechs, and keeping that money safe depends on the security of everything behind it, from our cloud infrastructure to the laptops our team works on. This is a chance to build HIFI's security program from its foundation and make safety a default part of how the company operates as it grows. Additional Requirement Must be within a commutable distance from our office and able to work in person most days of the week. Equal Opportunity StatementHIFI is an equal opportunity employer. We do not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other legally protected status. We also provide reasonable accommodations during the hiring process.