Security Engineer

Coinflow is hiring a Security Engineer to own the defensive and offensive security posture, building the SecOps backbone. Responsibilities include setting up SIEM, conducting internal penetration testing, managing vulnerability lifecycle, ensuring secure SDLC, and partnering with compliance. The engineer will use modern AI-native tooling including Claude Security and Claude Code. This role reports to the CTO and works across the engineering org. Coinflow is a fast-growing fintech payment service provider.

4+ years in security engineering, product security, or DevSecOps, ideally at a fintech or regulated environment. Strong hands-on offensive skills in web, API, cloud, and infrastructure pentesting. Production experience operating a SIEM (Datadog, Splunk, Elastic, etc.) and building dashboards. Fluency in TypeScript/Node and comfort in Rust, Go, or Python. Experience with vulnerability management at scale including CVE triage and dependency automation. Comfort with AI-native security tooling and a bias toward shipping in a fast-paced startup.