[All remote jobs](https://jobicy.com/jobs.md)Open role[![FastSpring logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2024/04/76c6c41f-221.jpeg)](https://jobicy.com/company/fastspring.md)Remote opportunity at[FastSpring](https://jobicy.com/company/fastspring.md) # Sr. Security Engineer Review the role, location requirements, compensation details, and application process before deciding whether this opportunity fits your next career move. [Apply for this job](#job-application)[View company](https://jobicy.com/company/fastspring.md)Share26 Aug 2026Published20Listing views1Application actions25 Sep 2026Apply before Opportunity details ## About this role. AI SummaryFastSpring is seeking a senior hands-on security engineer to strengthen application, cloud, and AI-assisted development security for its payments platform. The role spans Java application security, AWS infrastructure hardening, secure SDLC practices, vulnerability remediation, and reviews of agentic tooling. The engineer will partner with the Agentic Experience group, a fractional CISO, and executive stakeholders on risk, PCI DSS-related initiatives, monitoring, and incident readiness. Success requires strong AWS security expertise, sound prioritization, and the ability to translate technical security risks into actionable business priorities. ## Role DNA A quick view of the complexity, pace, ownership and collaboration implied by the job description. ### Job Complexity 5/5EasyHard ### Pace & Pressure 4/5RelaxedFast-paced ### Autonomy Level 5/5GuidedFull ownership ### Communication Load 5/5IndependentCollaborative AI insightThis is a senior, broad-scope security role in a regulated payments environment, requiring deep practical judgment across application, cloud, and emerging AI-tooling risks. The engineer must independently prioritize remediation while communicating effectively with both engineering teams and executive leadership. ## Salary analysis Estimated compensation compared with the broader US market for similar roles. Estimated job medianMarket rate$171,000US market range$150k–$210k0$231k AI insightThe disclosed estimated annual base-pay range is USD 155,000 to USD 187,000, with a midpoint of USD 171,000. For a US-based senior security engineer with AWS, application-security, payments, and AI security responsibilities, an indicative US base-salary market range is approximately USD 150,000 to USD 210,000 annually; total compensation may be higher where bonus or equity applies. ## Core skills Skills and capabilities most closely associated with this opportunity. [Application Security](https://jobicy.com/jobs?search_keywords=Application%20Security.md)[Cloud Security](https://jobicy.com/jobs?search_keywords=Cloud%20Security.md)[AWS Security](https://jobicy.com/jobs?search_keywords=AWS%20Security.md)[IAM](https://jobicy.com/jobs?search_keywords=IAM.md)[VPC Networking](https://jobicy.com/jobs?search_keywords=VPC%20Networking.md)[Secure SDLC](https://jobicy.com/jobs?search_keywords=Secure%20SDLC.md)[PCI DSS](https://jobicy.com/jobs?search_keywords=PCI%20DSS.md)[Vulnerability Management](https://jobicy.com/jobs?search_keywords=Vulnerability%20Management.md)[AI Security](https://jobicy.com/jobs?search_keywords=AI%20Security.md)[Incident Response](https://jobicy.com/jobs?search_keywords=Incident%20Response.md) Sample interview questionsHow would you prioritize vulnerabilities across a Java payments platform and AWS environment?I would combine technical severity with exploitability, asset criticality, exposure, data sensitivity, and available compensating controls. Internet-facing payment flows, identity systems, and vulnerabilities with active exploitation evidence would receive immediate attention, while lower-risk findings would enter a time-bound remediation plan with accountable owners. Describe an approach for improving AWS IAM security without disrupting engineering delivery. I would first inventory identities, permissions, privilege-escalation paths, and unused access through tools such as IAM Access Analyzer and CloudTrail. I would then phase in least-privilege roles, permission boundaries, short-lived credentials, and automated policy validation, partnering with service owners to test changes and avoid breaking production workflows. What security risks do AI-assisted development tools introduce, and how would you assess them? Key risks include source-code or secret leakage, untrusted tool integrations, excessive agent permissions, prompt injection, insecure generated code, and insufficient auditability. I would map data flows and permissions, restrict agents to least privilege, require approved integrations, implement logging and review controls, and define secure-use guardrails for developers. How would you integrate SAST, DAST, and SCA into CI/CD while minimizing developer friction? I would start with high-signal checks and establish severity-based blocking rules focused on exploitable critical issues. Findings should be routed into existing developer workflows with clear ownership, remediation guidance, baselining for legacy debt, and measurable service-level objectives rather than indiscriminately blocking every build. How would you communicate a significant security risk to executive stakeholders? I would explain the risk in business terms: affected systems, likelihood, potential customer or regulatory impact, current controls, and the decision needed. I would present a concise remediation plan with cost, timeline, residual risk, and clear options so leadership can make an informed prioritization decision. About FastSpring: FastSpring is how AI, SaaS, gaming, software, and digital product companies sell online in more places around the world. We handle all payment needs from checkout to taxes so you can go farther faster. Founded in 2005, we are a privately owned company headquartered in Santa Barbara with offices in Amsterdam, Austin, Belfast, Dublin, Halifax, and Singapore. Sr. Security Engineer Position Overview: We are seeking a Sr. Security Engineer to join our Agentic Experience group, reporting to the Principal Engineer, Agentic Development. In this role, you will strengthen the security posture of our core payments platform while helping shape security practices for AI-assisted software development. You will work closely with our Agentic Experience group and our CISO, with visibility to executive leadership. This is a hands-on engineering role with broad scope: application security, cloud infrastructure security, and security review of AI/agentic development tooling. Responsibilities & Goals: * Identify, prioritize, and remediate vulnerabilities across our Java-based platform and AWS infrastructure * Drive infrastructure security improvements, including IAM policy refinement, instance metadata protections, and network egress controls * Conduct security reviews of AI-assisted development pipelines, tool integrations, and agent-accessible services * Develop and maintain secure development standards, patterns, and guardrails for engineering teams * Partner with the fractional CISO on risk assessment, remediation planning, and compliance initiatives (including PCI DSS) * Contribute to incident response readiness and security monitoring improvements * Communicate security priorities and progress clearly to technical and executive stakeholders Experience & Qualifications: * 7+ years of hands-on security engineering experience (application security, cloud security, or infrastructure security) * Strong experience with AWS security services and primitives (IAM, VPC networking, secrets management) * Experience working in and securing large production codebases; JVM ecosystem experience preferred * Familiarity with modern AI-assisted development tools and an interest in their security implications * Strong prioritization and communication skills; ability to advocate for security investments with stakeholders * Experience in payments, fintech, or other regulated environments is a plus * Relevant certifications (e.g., CISSP, OSCP, AWS Security Specialty) are a plus but not required Nice to Have * Security certifications (e.g., AWS Security Specialty, CISSP, OSCP, GIAC). * Experience securing payments, ecommerce, or subscription/billing platforms. * Experience with secure SDLC practices and integrating security tooling (SAST/DAST/SCA) into CI/CD. * Familiarity with global, multi-currency, or tax-calculation systems and their data-sensitivity considerations. Consistent with FastSpring’s values and applicable law, we provide the following information to promote pay transparency and equity. The base pay range below represents a good faith estimate of the low and high end base pay range for the listed position. This role may be eligible for the corporate bonus plan (or, if a sales role, a commission plan as defined in the sales incentive plan document). In addition, FastSpring provides a variety of benefits to employees. Estimated Base Pay Range $155,000—$187,000 USD About the Company: FastSpring is an EQUAL EMPLOYMENT OPPORTUNITY/AFFIRMATIVE ACTION employer. Candidates are considered for employment with FastSpring without regard to their race, color, religion, national origin, age, sex, gender, pregnancy, disability, sexual orientation, gender identity, genetic information, military status, veteran status (specifically status as a disabled veteran, special disabled veteran, Vietnam Era veteran, recently separated veteran, armed forces service medal veteran, or other protected veteran) or other classification protected by applicable federal, state or local law. AI Transparency Statement: FastSpring may utilize artificial intelligence (AI) or automated tools during portions of the recruitment process to assist with operational and administrative activities, including candidate communications, scheduling, application organization, and interview documentation. These tools are designed to support efficiency and consistency within the hiring process. AI systems are not used as the sole determinant of hiring outcomes, and all employment decisions are made by qualified human reviewers. We are committed to responsible and fair hiring practices and continue to evaluate our use of technology accordingly. Show more [Apply now >](https://jobicy.com/jobs/151709-sr-security-engineer.md) * ![Upload CV](data:image/svg+xml;base64,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) ### Upload your resume now To unlock remote work opportunities and be discovered by global employers. This job listing has been manually reviewed by the Jobicy Trust & Safety Team for compliance with our posting guidelines, including verification of the company's legitimacy, accuracy of job details, clarity of remote work policy, and absence of misleading or fraudulent content. Next step ## Apply now. Follow the employer’s application method and review Jobicy’s safety guidance before sharing personal information. Keep exploring ## Related remote jobs. Matched by job category10 related opportunities[Cybersecurity](https://jobicy.com/categories/cybersecurity.md) [Browse all jobs](https://jobicy.com/jobs.md) * ![Clickhouse logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/08/6394b9a0-221.png) Clickhouse Aug 26 ### [Cloud Security Engineer](https://jobicy.com/jobs/151716-cloud-security-engineer.md) About ClickHouse Recognized on the 2025 Forbes Cloud 100 list, ClickHouse is one of the most innovative and fast-growing private cloud companies. With more than 4,000 customers and ARR that… * ![Binance logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/bc822f38-221.jpg) Binance Aug 26 ### [Open Source Intelligence Specialist](https://jobicy.com/jobs/151652-open-source-intelligence-specialist.md) Binance is a leading global blockchain ecosystem behind the world’s largest cryptocurrency exchange by trading volume and registered users. We are trusted by 300+ million people in 100+ countries for… * ![League logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2021/09/1252bb2582abaece8d30e08e4a386bd2.png) League Aug 25 ### [Principal Security Engineer](https://jobicy.com/jobs/151600-principal-security-engineer.md) About League League is one of the fastest-growing technology companies in Canada and the leading healthcare experience platform. Getting healthcare is often the easy part — finishing it is where… * ![Docplanner logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/08/84f2fa86-221.png) Docplanner Aug 24 ### [Senior Platform Security Engineer (100% Remote within Poland)](https://jobicy.com/jobs/151521-senior-platform-security-engineer-100-remote-within-poland.md) Welcome to the good side of tech 👋 You might have heard about us, but with a different name: Znany Lekarz. It all started 12 years ago when we asked… * ![Docplanner logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/08/84f2fa86-221.png) Docplanner Aug 24 ### [Senior Platform Security Engineer (100% Remote within Spain)](https://jobicy.com/jobs/151520-senior-platform-security-engineer-100-remote-within-spain.md) Welcome to the good side of tech 👋 You might have heard about us, but with a different name: Doctoralia. It all started 12 years ago when we asked ourselves:… * ![Qventus logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2022/01/0ad7e933ffa7b62281cc4b26710abfab.jpeg) Qventus Aug 24 ### [Senior Security Engineer](https://jobicy.com/jobs/151504-senior-security-engineer-2.md) On this journey for over 12 years, Qventus is leading the transformation of healthcare. We enable hospitals to focus on what matters most: patient care. Our innovative solutions harness the… * ![CertiK logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2021/03/Jobicy-210308091023-955845.jpg) CertiK Aug 24 ### [Blockchain Security Engineer – (Solidity / Rust / Golang)](https://jobicy.com/jobs/151470-blockchain-security-engineer-solidity-rust-golang.md) About the Company CertiK is the largest blockchain security auditor and provides a comprehensive suite of tools to secure the industry at scale. To date, CertiK has worked with over… * ![Sporty Group logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/8e6c246a-221.png) Sporty Group Aug 24 ### [Security Platform Engineer](https://jobicy.com/jobs/151442-security-platform-engineer.md) About the roleStrengthen Sporty’s security monitoring and detection capability by managing, tuning, and continuously improving EDR and SIEM platforms. Ensure security alerts are accurate, actionable, and provide reliable visibility across… * ![Lakeshore Learning Materials, LLC logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/d8ba23f6-221.jpg) Lakeshore Learning Materials, LLC Aug 23 ### [Manager of IT Security](https://jobicy.com/jobs/149591-manager-of-it-security.md) Company DescriptionAt Lakeshore, we create innovative learning materials and world-class guest experiences for teachers, parents and children. Since 1954, we’ve grown into a global community—with a thriving e-commerce business, multiple… * ![Tenable logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/01879e02-221.jpg) Tenable Aug 22 ### [Senior Director, Ecosystem & Solution Architectures – Technical Alliances](https://jobicy.com/jobs/151413-senior-director-ecosystem-solution-architectures-technical-alliances.md) Who is Tenable? Tenable® is the Exposure Management company. Over 40,000 organizations around the globe rely on Tenable to understand and reduce cyber risk. Our global employees support 65 percent…