Design and build scalable infrastructure for the OneBank product, focusing on reliability and performance.
About this role
SmartBank is hiring a Security Engineer to lead product security for OneBank, its card-payments product. The product handles balances, member data, and transaction data, and operates under the need to comply with PCI DSS and other industry standards. The role protects the confidentiality, integrity, and availability of this information while helping development proceed safely.
As the first product security engineer, the person in this role will lead the planning through implementation of the mechanisms needed to maintain OneBank’s security. The role works across product development teams and SRE, belongs to Corporate IT, and carries out practical work with the CTO and members of the security committee.
Responsibilities include managing vulnerabilities in the product and development environment. This includes automating vulnerability assessments, managing dependent libraries, and operating triage for detected findings.
For new features, new products, and new partner connections, the engineer will conduct threat modeling and risk assessments during design, plan the safeguards needed for secure delivery, and lead their implementation. The role will evaluate architectures that handle member data and card information, and establish or improve policies for access control, encryption, and key management.
In cooperation with Corporate IT and SRE, the engineer will design and introduce mechanisms to detect attacks and suspicious behavior. The role will also design the process from detection and escalation through containment and post-incident analysis, and lead actual security incident response.
Additional responsibilities include establishing secure-coding guidelines and educating internal staff so development teams can make safe choices autonomously. The posting states that payment-domain knowledge can be learned after joining and provides external materials about issuer systems, Visa card payment systems, and card production technology. Engineers are assigned to one of several teams working toward business goals, while cross-team issues are addressed through committees.
This is an AI-generated summary of the employer's original posting — details can be incomplete, out of date or simply wrong. Always confirm everything on the official posting before applying.
Similar jobs
Manage and enhance the engineering organization, focusing on sustainable scaling and strategic execution.
Use Python and SQL to analyze real-world food, health, and lifestyle data, contributing to recommendation systems, clinical research, visualizations, and business reports in a Tokyo R&D internship.
Develop end-to-end machine-learning models for autonomous-driving taxis from camera and LiDAR data, then evaluate and optimize them in simulation and real vehicles.
Build and operate shared AWS cloud infrastructure across multiple products, using Terraform, Kubernetes and GitHub Actions to improve reliability and incident response.
Build and manage internal IT and security foundations, including policies, security tools, Microsoft 365, assets, accounts, help desk, and workflow automation. Remote and office work are available.