Job description

TL;DR We sell trust, and security is core to that promise. We're looking for someone to lead how we think about code and operational security as we scale. You'll help design the systems, practices, and safeguards that enable us to grow without compromising on that trust. About us We believe stablecoins are better money and will be the backbone of better payments. We see key structural problems hindering stablecoin adoption, and we’re going to fix them – starting with building a clearinghouse. We’re a small, scrappy team based in NYC, we’ve raised $10M from a16z crypto and other excellent partners, and we’re going to bring better money to the world. What you'll do: - Own our security posture across application security, infrastructure security, and operational security. - Conduct code reviews, threat modeling, and penetration testing to identify and remediate vulnerabilities. - Design and implement security controls, monitoring, and incident response processes appropriate for a regulated payments environment. - Establish security policies, procedures, and compliance frameworks (SOC 2, PCI-DSS, etc.) as we scale. - Hire, manage, and supervise specialist contractors or future security hires as the team grows. - Ship internal security tooling and features. We need someone who can build, not just advise. - Work closely with engineering to embed security into our development lifecycle from the start. What We're Looking For: - 5+ years of experience in security engineering, with meaningful time at a payments company, bank, or other regulated financial institution. - Experience with cloud environments (GCP) and infrastructure as code providers (Terraform). - Breadth across both application/code security and operational security. You don't need to be the world's deepest expert in both, but you need to be knowledgeable in each and capable of hiring and managing those who are. - You can write production code, not just review it. Ideally you've shipped internal tools or security features yourself. - Experience building security programs at early-stage or high-growth companies, ideally from scratch. - Familiarity with compliance frameworks relevant to payments and banking (SOC 2, PCI-DSS, state money transmission, etc.). - You view a lack of specificity as an opportunity for ownership. - Based in New York City (or willing to relocate). Our Values - Be offended by the status quo - a payment taking 3 days and costing 3% is offensive. Every day that people interact with legacy financial infrastructure costs humanity time and money. Bring the future forward with righteous indignation. - Be all over it - operate with extreme urgency and accountability. Know the numbers, meet the right people, answer every email, go the extra mile. Ask yourself: can it be done today? - We sell trust - trust is easy to lose. Security and integrity are our foundation. Use every interaction and every product as an opportunity to build trust. This is non-negotiable. - Do the dishes - we are all owners. Put ego aside and get shit done. - Be the glue - pick each other up and make each other better. Be direct, be helpful, and assume positive intent. Win as a team. - We enjoy the crucible! We are on a mission to change money. It takes a lot of optimism to attack such an ambitious goal. Our opportunity is a privilege and we don’t forget that. Especially when the journey is hard. If these values speak to you, come talk to us! Benefits: We're playing the long-game. We think you should too. This means investing in our employees. We offer comprehensive (and growing) benefits, including: - Competitive salary and equity - Comprehensive insurance (medical/dental/vision) - Unlimited vacation: Take time when you need it - Periodic off-sites - Daily lunch provided Equal Opportunity Employment: The Better Money Company is an equal opportunity employer. We are looking for the best!

Requirements

Must-haves

Own our security posture across application security, infrastructure security, and operational security.
Conduct code reviews, threat modeling, and penetration testing to identify and remediate vulnerabilities.
Design and implement security controls, monitoring, and incident response processes appropriate for a regulated payments environment.
Establish security policies, procedures, and compliance frameworks (SOC 2, PCI-DSS, etc.) as we scale.
Hire, manage, and supervise specialist contractors or future security hires as the team grows.
Ship internal security tooling and features. We need someone who can build, not just advise.
Work closely with engineering to embed security into our development lifecycle from the start.
5+ years of experience in security engineering, with meaningful time at a payments company, bank, or other regulated financial institution.
Experience with cloud environments (GCP) and infrastructure as code providers (Terraform).
Breadth across both application/code security and operational security. You don't need to be the world's deepest expert in both, but you need to be knowledgeable in each and capable of hiring and managing those who are.
You can write production code, not just review it. Ideally you've shipped internal tools or security features yourself.
Experience building security programs at early-stage or high-growth companies, ideally from scratch.
Familiarity with compliance frameworks relevant to payments and banking (SOC 2, PCI-DSS, state money transmission, etc.).
You view a lack of specificity as an opportunity for ownership.
Based in New York City (or willing to relocate).
The Better Money Company is an equal opportunity employer. We are looking for the best!

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

gcpgo

Platform: ashby
Effort: quick

Benefits

Benefits detected in the listing.

Dental

Vision

Pto