Modern Treasury
Overview
Modern Treasury’s mission is to build the most trusted financial infrastructure for global money movement. We’re looking for a Security Engineer to design and strengthen the controls that protect our payment infrastructure. You’ll enable as well as build secure, compliant financial products while contributing directly to the reliability and automation of our security and DevOps systems. What You’ll Do
Lead application security across our payment platform, including secure code review, threat modeling, and security architecture for new products Own product security for new payment rails, including FBO account structures, stablecoin integration, and enhanced compliance features Design and implement DevSecOps tooling and automation to improve security posture across CI/CD and infrastructure Partner with engineering teams to embed security into the development lifecycle through automation, secure design patterns, and security champions Drive security architecture decisions for customer‑facing APIs, authentication systems, and data protection controls Build monitoring and detection capabilities for application‑layer threats, API abuse, and fraud patterns Design infrastructure monitoring, automation, and remediation practices that keep our systems resilient and trustworthy Collaborate with Compliance and Legal to ensure product features meet regulatory requirements (BSA/AML, KYC/KYB, state money transmission) Influence technical strategy across Product, Platform, and Infrastructure teams on security and risk management Required Experience
7+ years in DevOps with a focus on security engineering, with 3+ years focused on application and product security Strong experience with full‑stack application security (frontend, backend, APIsli> Authentication and authorization systems and identity management DevOps or infrastructure automation related to security (AWS, Docker, CI/CD pipelines) Fraud detection, prevention, and abuse mitigation in payment or financial products Secure SDLC practices and developer security tooling Experience with incident response and security monitoring Knowledge and experience with application security for Ruby on Rails, GraphQL, JavaScript, React, and containerized environments Payments engineering experience, ideally including fraud prevention and risk controls in money movement systems What Sets You Apart
2+ years in payments or fintech, with a deep understanding of money movement security challenges Familiarity with compliance and regulatory standards for money movement, such as PCI DSS, BSA/AML, and KYC/KYB Experience with payment processing security across ACH, wires, card networks, and emerging rails Experience building controls for fraud detection, chargeback prevention, and abuse mitigation in payment systems Experience integrating security into DevOps workflows (e.g., Buildkite, IaC, AWS security automation) Experience with stablecoin security, blockchain integrations, or crypto payment rails Track record of balancing pragmatic risk management with business velocity Demonstrated ability to lead security initiatives across multiple teams without direct authority Technologies We Use
Ruby on Rails for our backend framework React, GraphQL, and Tailwind CSS on the front end Postgres for our database AWS for infrastructure and hosting Docker for containerization GitHub for source code management Buildkite for continuous integration RegTech and anti‑fraud platforms About Modern Treasury
Modern Treasury is the operating system for money movement. Our payments platform combines a suite of APIs and dashboards to help companies unlock new payments revenue, strengthen customer experiences, and drive efficiency through their business. Our end‑to‑end platform moves enterprises forward with faster payments, efficient workflows, full data visibility. Modern Treasury is committed to equal employment opportunity and does not discriminate in any employment opportunities or practices based on an individual's race, color, creed, gender (including gender identity and gender expression), religion (all aspects of religious beliefs, observance or practice, including religious dress or grooming practices), marital status, registered domestic partner status, age, national origin or ancestry (including language use restrictions and possession of a driver’s license issued under California Vehicle Code section 12801.9), natural hair, physical or mental disability, political affiliation, medical condition (including cancer or a record or history of cancer, and genetic characteristics), sex (including pregnancy, childbirth, breastfeeding or related medical condition), genetic information, sexual orientation, military and veteran status or any other consideration made unlawful by federal, state, or local laws. It also prohibits unlawful discrimination based on the perception that anyone has any of those characteristics, or is associated with a person who has or is perceived as having any of those characteristics. Modern Treasury participates in E‑Verify and will provide the federal government with your Form I‑9 information to confirm that you are authorized to work in the U.S.
#J-18808-Ljbffr
Modern Treasury’s mission is to build the most trusted financial infrastructure for global money movement. We’re looking for a Security Engineer to design and strengthen the controls that protect our payment infrastructure. You’ll enable as well as build secure, compliant financial products while contributing directly to the reliability and automation of our security and DevOps systems. What You’ll Do
Lead application security across our payment platform, including secure code review, threat modeling, and security architecture for new products Own product security for new payment rails, including FBO account structures, stablecoin integration, and enhanced compliance features Design and implement DevSecOps tooling and automation to improve security posture across CI/CD and infrastructure Partner with engineering teams to embed security into the development lifecycle through automation, secure design patterns, and security champions Drive security architecture decisions for customer‑facing APIs, authentication systems, and data protection controls Build monitoring and detection capabilities for application‑layer threats, API abuse, and fraud patterns Design infrastructure monitoring, automation, and remediation practices that keep our systems resilient and trustworthy Collaborate with Compliance and Legal to ensure product features meet regulatory requirements (BSA/AML, KYC/KYB, state money transmission) Influence technical strategy across Product, Platform, and Infrastructure teams on security and risk management Required Experience
7+ years in DevOps with a focus on security engineering, with 3+ years focused on application and product security Strong experience with full‑stack application security (frontend, backend, APIsli> Authentication and authorization systems and identity management DevOps or infrastructure automation related to security (AWS, Docker, CI/CD pipelines) Fraud detection, prevention, and abuse mitigation in payment or financial products Secure SDLC practices and developer security tooling Experience with incident response and security monitoring Knowledge and experience with application security for Ruby on Rails, GraphQL, JavaScript, React, and containerized environments Payments engineering experience, ideally including fraud prevention and risk controls in money movement systems What Sets You Apart
2+ years in payments or fintech, with a deep understanding of money movement security challenges Familiarity with compliance and regulatory standards for money movement, such as PCI DSS, BSA/AML, and KYC/KYB Experience with payment processing security across ACH, wires, card networks, and emerging rails Experience building controls for fraud detection, chargeback prevention, and abuse mitigation in payment systems Experience integrating security into DevOps workflows (e.g., Buildkite, IaC, AWS security automation) Experience with stablecoin security, blockchain integrations, or crypto payment rails Track record of balancing pragmatic risk management with business velocity Demonstrated ability to lead security initiatives across multiple teams without direct authority Technologies We Use
Ruby on Rails for our backend framework React, GraphQL, and Tailwind CSS on the front end Postgres for our database AWS for infrastructure and hosting Docker for containerization GitHub for source code management Buildkite for continuous integration RegTech and anti‑fraud platforms About Modern Treasury
Modern Treasury is the operating system for money movement. Our payments platform combines a suite of APIs and dashboards to help companies unlock new payments revenue, strengthen customer experiences, and drive efficiency through their business. Our end‑to‑end platform moves enterprises forward with faster payments, efficient workflows, full data visibility. Modern Treasury is committed to equal employment opportunity and does not discriminate in any employment opportunities or practices based on an individual's race, color, creed, gender (including gender identity and gender expression), religion (all aspects of religious beliefs, observance or practice, including religious dress or grooming practices), marital status, registered domestic partner status, age, national origin or ancestry (including language use restrictions and possession of a driver’s license issued under California Vehicle Code section 12801.9), natural hair, physical or mental disability, political affiliation, medical condition (including cancer or a record or history of cancer, and genetic characteristics), sex (including pregnancy, childbirth, breastfeeding or related medical condition), genetic information, sexual orientation, military and veteran status or any other consideration made unlawful by federal, state, or local laws. It also prohibits unlawful discrimination based on the perception that anyone has any of those characteristics, or is associated with a person who has or is perceived as having any of those characteristics. Modern Treasury participates in E‑Verify and will provide the federal government with your Form I‑9 information to confirm that you are authorized to work in the U.S.
#J-18808-Ljbffr