About the role
About Us: Monarch is a powerful, all-in-one personal finance platform designed to help make the complexity of finances feel simple again. Since launching in 2021, we’ve become the top-recommended personal finance app by users and experts. Our goal? To take the stress out of finances so our members can focus on what truly matters. We are a team of do-ers led by experienced entrepreneurs who are passionate about helping our members reach their financial goals. We are hyper focused on building a product people love and continuing to evolve based on user feedback. As a fully remote company (even before COVID!), we welcome applicants from almost anywhere. Our team collaborates synchronously mostly from 9 AM – 2 PM PT and embraces asynchronous work to stay connected across time zones. Join us on our mission to transform lives by simplifying money, together.
The Role: Monarch is seeking a Senior Engineering Manager to lead and grow our Application & Product Security squad. Reporting directly to the Head of Foundations, you will own the direction of product, application, and AI security at a company where security is a competitive differentiator and a genuine reflection of how much we care about our members. This is a player-coach role where people leadership comes first — you'll set strategy, build structure, and develop a high-performing team — but you're expected to stay hands-on. You'll do the work alongside your team, not just direct it.
What You'll Do: Lead and grow the Application & Product Security squad, defining
the team's charter, KPIs, and roadmap and holding
the team accountable to measurable outcomes Combining strong engineering execution with strategic leadership to drive the squad forward Own the strategic direction of product, application, and AI security — translating business and regulatory risk into a clear, prioritized program Drive vulnerability management end-to-end with urgency, owning reporting across Monarch's product surface area Lead offensive security programs including penetration testing, bug bounty, and threat detection & incident response Embed AI-first, automated approaches to securing the engineering pipeline and SDLC — replacing manual processes with AI agents where appropriate What You'll Bring: 8+ years in security engineering with at least 3 years leading security teams Hands on experience building scalable Product Security programs Deep expertise in application security, secure SDLC, and vulnerability management Experience owning offensive security programs (pentesting, bug bounty, or IR) Demonstrated ability to build structure, define KPIs, and drive teams toward measurable outcomes Transformative AI fluency - you actively use and drive AI-first approaches in your work Nice to Haves: Experience in fintech or with financial data security
