Security Engineer, Business Continuity & Risk

Role overview Build and operate the systems behind a financial services risk program focused on third-party security and business continuity. The work combines software engineering, data integration, continuous controls, and carefully governed AI workflows to turn manual oversight into auditable systems. This is an early-stage, cross-functional effort where you will help define the technical approach as well as deliver it.

Responsibilities - Own and operationalize third-party risk management and business continuity processes. - Integrate and reconcile risk, control, and asset data across systems such as source control, service registries, identity, ticketing, and data platforms. - Turn standards and compliance requirements into versioned, testable policy-as-code checks. - Build AI-assisted workflows for evidence analysis, classification, assessments, and control monitoring, with deterministic and auditable decision layers. - Automate evidence gathering and continuous monitoring to reduce point-in-time audit work. - Partner with security, procurement, resilience, and engineering teams to identify manual processes suitable for productization.

Requirements - Experience with third-party risk management and business continuity. - At least four years building production software in backend, platform, data, or software engineering. - Multi-year ownership of a production system, including operational support, service objectives, and ongoing maintenance. - Proficiency in Python, Kotlin, Java, or Go, plus confidence navigating unfamiliar codebases. - Hands-on experience building LLM-powered features, agents, or tool workflows, with sound judgment about when model reasoning is appropriate. - Experience with APIs, webhooks, authentication, event-driven integrations, and joining imperfect data from multiple sources. - Ability to set technical direction in ambiguous work and carry it across teams.

Nice to have - Familiarity with security or compliance frameworks such as PCI DSS, SOX, SOC 2, ISO 27001, or NIST, or prior governance, risk, and compliance experience.

Benefits and work setup - Remote work, medical insurance, flexible time off, retirement savings, and family planning benefits are listed. - U.S. base pay varies by location zone, with published ranges from $185,200 to $326,800.