Application & Cloud Security Engineer (L2)

Responsibilities

• Perform manual and automated code reviews to support secure SDLC
• Triage and drive remediation for findings from SAST, DAST, SCA, and bug bounty programs
• Support threat-modeling sessions for new services and features
• Manage AWS account security, including IAM policy reviews and least-privilege analysis
• Help harden Kubernetes clusters through admission control, RBAC hygiene, and secrets management
• Tune WAF rules (AWS WAF / Cloudflare) and run vulnerability scans against cloud infrastructure
• Contribute to security automation using Python, Go, or Bash
• Participate in the InfoSec on-call rotation and research emerging threats

Requirements

• 2–4 years of hands-on experience in Application Security, Cloud Security, or a related role
• Solid grounding in security fundamentals including OWASP Top 10, TLS/PKI, and OAuth/JWT
• Hands-on exposure to both AppSec (SAST/DAST/manual review) and CloudSec (AWS/GCP/Azure)
• Ability to write useful internal tools using Python, Go, or Bash
• Strong communication skills with the ability to translate technical findings into actionable engineering tasks

Preferred Qualifications

• Degree in Computer Science, Information Security, or a similar field
• Experience with Kubernetes in a production environment
• Familiarity with Infrastructure as Code (Terraform) and security enforcement
• Participation in bug bounties, CTFs, or open-source security contributions
• Relevant certifications such as AWS Security Specialty, OSCP, CKS, or CEH

Benefits

• Competitive salary and equity in a rapidly growing fintech company
• Clear professional growth path toward an L3 specialist role
• Opportunity to work in a fast-paced, high-stakes startup environment
• Collaborative work culture focused on personal and professional development

About the Company

OpenFX is on a mission to move money as freely as data, unrestricted by time zones, banking hours, or legacy systems. We are building the infrastructure that will power the next generation of cross-border payment systems for institutions. Our team is backed by top-tier investors including Accel, Faction, NfX, and Accomplice.