About the role
OVERVIEW This position can be based out of San Francisco, New York, or remote (we accept candidates from the following states: AZ, CA, CO, CT, FL, GA, HI, IL, MA, MI, MN, MT, NC, NJ, NV, NY, OH, OK, OR, PA, TN, TX, UT, WA, WI). Modern Treasury’s mission is to build the most trusted financial infrastructure for global money movement. We’re looking for a Security Engineer to design and strengthen the controls that protect our payment infrastructure. You’ll enable as well as build secure, compliant financial products while contributing directly to the reliability and automation of our security and infrastructure systems. Modern Treasury is expanding deeper into money movement. We’re building new products that will let customers move funds across both traditional rails and emerging technologies, including stablecoins. You’ll help design, deploy and operate the security controls that make this possible and set the foundation for compliant, programmable money movement at scale. This role is hands-on security engineering with heavy focus on automation.
ABOUT
THE ROLE This role focuses on application, product, and infrastructure security, and sits at the intersection of security, platform, payments engineering, and infrastructure. You’ll shape how Modern Treasury manages risk at scale and design the systems that make programmatic, compliant money movement possible. We are looking for someone who can influence security strategy, drive DevSecOps automation and contribute to architectural design. Your work will ensure that as we grow into new products and payment rails, we continue to move fast while keeping trust, compliance, and safety at the core of our platform. WHAT YOU’LL DO Lead application security across our payment platform, including secure code review, threat modeling, and security architecture for new products Own product security for new payment rails, including FBO account structures, stablecoin integration, and enhanced compliance features Design and implement DevSecOps tooling and automation to improve security posture across CI/CD and infrastructure Partner with engineering teams to embed security into the development lifecycle through automation, secure design patterns, and security champions Drive security architecture decisions for customer-facing APIs, authentication systems, and data protection controls Build monitoring and detection capabilities for application-layer threats, API abuse, and fraud patterns Design infrastructure monitoring, automation, and remediation practices that keep our systems resilient and trustworthy Collaborate with Compliance and Legal to ensure product features meet regulatory
