Stash is on a mission to give financial opportunity to all; we want to build financial systems that work for everyone—not just the wealthy. But that takes more than just a mission. It takes great people and an open, inclusive, and diverse environment where innovation and quality can thrive.

We are looking for a Security Software Engineer to join our team and protect our rapidly expanding web and mobile investment platform. As a Security Software Engineer, you’ll be responsible for identifying and architecting solutions that will protect Stash customers, employees and our product from attacks. This individual will utilize the latest technologies and techniques to create the most secure environment possible at Stash.

What you’ll do:

• Build, recommend and maintain security solutions that will protect Stash’s customers, web platforms and mobile platforms
• Partner with the engineering team to build out microservices that our APIS can interact with for services such as authentication, authorization and risk monitoring
• Enhance the SDLC to incorporate security development best practices, testing and auditing
• Develop detection mechanisms for alerting, responding to and investigating security incidents
• Work with the data science team to understand risk and attack patterns to build threat intelligence tools
• Perform vulnerability assessments, risk assessments, security assessments and penetration tests on Stash application resources

What we're looking for:

• Bachelors in Computer Science or related discipline or equivalent experience
• 5+ years proven work experience as a security engineer, software engineer with security experience or equivalent position
• 2+ years experience working with AWS solutions
• Strong understanding of full stack security management
• Experience with conducting security assessments
• Software development experience with one of the following languages: Ruby on Rails, Scala, or Go
• Strong scripting experience in Python and/or Bash
• Exceptional written and oral presentation skills

**No recruiters, please