Security Engineer II

Human Interest is on a mission to ensure that people in all lines of work have access to retirement benefits. More than half of all working Americans are not saving enough for their future. Too often, it’s because they are employed by a company that doesn’t offer a retirement plan. Human Interest is changing that by making it affordable and accessible for small and medium-sized businesses to offer employees a path to financial independence through retirement savings. We’re a high-growth fintech company changing the retirement industry. We are backed by a number of investors. This includes funding from Marshall Wace and Baillie Gifford, as well as top investors such as BlackRock , TPG (The Rise Fund) , SoftBank, Glynn Capital , NewView Capital, USVP, Wing, Uncork, and more. About the role In this role, you’ll partner with other technology teams to design and implement secure software and practices. You’ll also collaborate with product and other business stakeholders to establish and improve existing security controls. About the team The security engineering team is building tooling and processes to automate detection and mitigation of cybersecurity threats. In this role, you’ll partner with other technology teams to design and implement secure software and practices. You’ll also collaborate with product and other business stakeholders to establish and improve existing security controls. What you get to do every day You are passionate about building practical solutions to securely deliver code at every stage of the software development lifecycle. You have a deep understanding of software engineering and security fundamentals and want to empower others to understand the importance of security. You have a track record of efficiently delivering projects that elevate the security posture of your organization. You have a strong interest in generative AI tooling and applying their use safely. Build practical controls to improve the effectiveness and robustness of our engineering team Foster a DevSecOps culture through education, automation, and tooling. Secure our SDLC process through automation Implement checks in pipeline Perform security reviews of application code Take part in team on call rotation for security events and monitoring alerts Advocate and educate security best practices Create tooling and automation to efficiently respond to security events Partner with stakeholders to respond and mitigate security threats What you bring to the role Consistent track record of securing application services and cloud infrastructure Proficient coding ability in at least one modern programming language. E.g.Typescript/Javascript, Ruby, Java, Python, Golang Practical experience securing cloud environments. Strong communication skills: you can easily discuss complex technical concepts with both engineers and non-engineers. Strong ownership and bias for action: You love to roll up your sleeves. You are proactive, drive projects from start to finish, and lead cross-functional projects, while keeping stakeholders informed. Leader and Mentor: You are a recognized leader in your areas of responsibility, and enjoy sharing knowledge and mentoring others. Operational Excellence: you raise the bar on the quality of the software and infrastructure that you work on. Nice to have: Ability to secure AI tooling in a regulated environment Familiarity with securing Node.js and GraphQL Applied knowledge of a threat modeling framework like STRIDE or MITRE Experience performing security testing for cloud hosted applications Direct experience participating in or leading threat detection and response Why you will love working at Human Interest Human Interest is tackling one of our country's biggest challenges - closing the retirement gap. You'll be instrumental in architecting and scaling solutions that bring financial security to employees at small and medium-sized businesses nationwide. We’ve made significant progress, but there is still growth ahead, offeri