About the role
We’re looking for someone who can maintain a strong security posture without slowing down development.
This is a hands-on senior IC software engineering role for someone who specializes in security. You will work directly in our product and platform code, build internal tooling and guardrails, review designs and implementations, and help engineers eliminate classes of vulnerabilities at the source.
We handle highly sensitive personal and financial data, so security matters deeply here. But we believe good security work shows up as better architecture, safer defaults, useful tooling, and sound engineering judgment — not process theater.
This role is focused primarily on product security and security engineering: secure design, threat modeling, code review, authentication and authorization, secrets handling, CI/CD guardrails, and internal tooling. It is not primarily a compliance-management, endpoint-IT, vendor-risk, or scanner-operations role.
This role is best suited to someone who likes startup environments: small teams, broad ownership, imperfect systems, and the chance to materially improve the product through direct engineering work. You should be comfortable making pragmatic decisions, operating with incomplete information, and focusing on the highest-leverage fixes rather than importing heavyweight processes from much larger companies.
What To Expect
As a senior engineer at Loancrate, you should expect to spend meaningful time in code, in design reviews, and in implementation — not primarily coordinating programs or acting as an external reviewer.
You will likely spend your time on work such as:
- building secure-by-default libraries, helpers, and templates that engineers use across services
- reviewing designs and pull requests for authentication, authorization, tenant isolation, secrets handling, data exposure, and abuse cases
