Senior Platform Security Engineer

Spade is a financial data and AI platform that transforms messy transaction data into structured, verified records for fintech and financial services customers. The Senior Platform Security Engineer will own the security of Spade’s production edge, including mutual-TLS certificate infrastructure, private network connectivity, webhook security, vulnerability remediation, and secure-build standards.

Responsibilities:

• Own and operate mutual-TLS certificate infrastructure for enterprise bank onboarding and product operations
• Build and maintain the security workflow for private network connectivity, including endpoint tenancy mapping and connection monitoring
• Operate webhook delivery security from signing-secret rotation, client-certificate management, and delivery-failure response for outbound integrations
• Drive vulnerability remediation end-to-end from application and infrastructure scanning through verified closure
• Set and codify secure-build standards for the engineering team
• Continuously improve our security posture by collaborating across engineering, product, and go-to-market to deliver value to customers and internal stakeholders

Requirements:

• • 6+ years of experience in platform, infrastructure, or network security engineering, with hands-on ownership of production systems
• • Deep experience with PKI and certificate lifecycle management
• • Strong understanding of TLS/mTLS
• • Hands-on AWS networking and security experience
• • Working knowledge of OAuth 2.0 (client-credentials flow, JWT validation) and familiarity with certificate-bound token patterns
• • Experience setting security standards and working with engineering teams to adopt them
• • Fintech or payments background; experience integrating with bank or financial institution network edges
• • Experience with cloud infrastructure and tools like AWS CDK
• • PCI DSS or SOC 2 technical control implementation
• • Prior experience on a small or early-stage security team