Senior Security Engineer

About January At January, we're rebuilding one of the most broken parts of consumer finance: what happens after someone falls behind on debt. Our autonomous, compliant collections platform works directly for creditors, using data and AI to personalize outreach and offer consumers clearer, more compassionate ways to resolve what they owe. January has serviced $20B+ in debt and engaged 20M+ consumers. Backed by Series B funding, ~100+ people working out of Nolita, NYC. About the Role As a Senior Security Engineer, you'll set a new standard for security in an industry where trust is profoundly broken. You'll architect dual trust — securing both consumer-facing experiences and bank-grade enterprise systems — while solving technical challenges unique to the space: privacy-preserving data systems, multi-jurisdiction compliance automation, and AI-enabled decisioning. Key Responsibilities - Embed security as a competitive advantage — transform January's security posture into product capabilities that unlock Tier 1 partnerships - Drive security-by-design across product and application development — partner with product and engineering to identify and elevate critical risks before production - Architect systems for bank-grade data protection — design and implement data classification, encryption, and access control meeting regulated client requirements - Cultivate a security-first engineering culture — lead incident response with clarity and urgency - Scale compliance with minimal overhead — maintain SOC 2, PCI-DSS, and financial compliance through automated systems Requirements - 5+ years of security engineering experience, ideally in cloud-native or fintech environments - Hands-on building application-level security controls in cloud environments (AWS, Terraform, Snowflake) - Track record implementing security that accelerates velocity, not blocks it - Technical depth: secure coding (Python, JavaScript), infrastructure-as-code, CI/CD security - Knowledge of OWASP, secure coding practices, and common vulnerability patterns Bonus Skills - Experience with compliance frameworks (SOC 2, PCI-DSS, bank security standards) - Ability to translate technical trade-offs into business language