Human Interest
Senior Application Security Engineer
Job Summary
This role focuses on building tooling and processes to automate cybersecurity threat detection and mitigation within a security engineering team. The candidate will partner with various teams to design and implement secure software practices, conduct security reviews, and improve security controls across the software development lifecycle. Requirements include at least 2 years of security-focused engineering experience, proficiency in a modern programming language, and a strong understanding of cloud security. The position offers opportunities to lead cross-functional projects, mentor others, and contribute to the security posture of a growing fintech company dedicated to expanding retirement benefits access.
Required Skills
Benefits
Job Description
Human Interest is on a mission to ensure that people in all lines of work have access to retirement benefits.
More than half of all working Americans are not saving enough for their future. Too often, it’s because they are employed by a company that doesn’t offer a retirement plan. Human Interest is changing that by making it affordable and accessible for small and medium-sized businesses to offer employees a path to financial independence through retirement savings.
We’re a high-growth fintech company changing the retirement industry. We are backed by a number of investors. This includes funding from Marshall Wace and Baillie Gifford, as well as top investors such as BlackRock, TPG (The Rise Fund), SoftBank, Glynn Capital, NewView Capital, USVP, Wing, Uncork, and more.
Are you ready to join our amazing engineering team ?
As an engineering organization, we seek to redefine the retirement services space with software that drives toward an effortless, efficient, scalable and highly reliable cloud based experience. Joining our team requires passion for ownership - after all, this is what enables our users’ success.
About Security Engineering team
The security engineering team is building tooling and processes to automate detection and mitigation of cybersecurity threats. In this role, you’ll partner with other technology teams to design and implement secure software and practices. You’ll also collaborate with product and other business stakeholders to establish and improve existing security controls.
About you
You are passionate about building practical solutions to securely deliver code at every stage of the software development lifecycle. You have a deep understanding of software engineering and security fundamentals and want to empower others to understand the importance of security. You have a track record of efficiently delivering projects that elevate the security posture of your organization.
What you get to do every day
- Build practical controls to improve the effectiveness and robustness of our engineering team
- Foster a DevSecOps culture through education, automation, and tooling.
- Secure our SDLC process through automation
- Implement checks in pipeline
- Perform security reviews of application code
- Take part in team on call rotation for security events and monitoring alerts
- Advocate and educate security best practices
- Create tooling and automation to efficiently respond to security events
- Partner with stakeholders to respond and mitigate security threats
What you bring to the role
Base Qualifications:
- Minimum 2 years in a security focused engineering role
- Minimum 5 years in software engineering role
- Proficient coding ability in at least one modern programming language. E.g.Typescript/Javascript, Ruby, Java, Python, Golang
- Practical experience securing cloud environments
- Strong communication skills: you can easily discuss complex technical concepts with both engineers and non-engineers
- Strong ownership and bias for action: You love to roll up your sleeves. You are proactive, drive projects from start to finish, and lead cross-functional projects, while keeping stakeholders informed.
- Leader and Mentor: You are a recognized leader in your areas of responsibility, and enjoy sharing knowledge and mentoring others.
- Operational Excellence: you raise the bar on the quality of the software and infrastructure that you work on.
Nice to have:
- Familiarity with securing Node.js and GraphQL
- Applied knowledge of a threat modeling framework like STRIDE or MITRE
- Experience performing security testing for cloud hosted applications
Human Interest is tackling one of our country's biggest challenges - closing the retirement gap. You'll be instrumental in architecting and scaling solutions that bring financial security to employees at small and medium-sized businesses nationwide. We’ve made significant progress, but there is still growth ahead, offering you a unique opportunity to solve complex problems, drive innovation, and advance your career alongside a dedicated, mission-driven team. We value hard work and recognize that our team's contributions are key to our continued success.
Join Human Interest and make a lasting impact by shaping the future of retirement.
Our operating principles define how we work together as a team. They reflect Human Interest’s unique view on what’s important and what’s right. Documenting this core aspect of our culture helps employees make good decisions on their own. It also helps candidates considering career opportunities critically evaluate whether they will thrive at Human Interest.
- Customer obsession: We're all about creating amazing experiences for our customers. We put their needs first and go the extra mile to make them smile.
- Long-Term Orientation: We're not just playing for today; we're building a legacy. We think big, plan strategically, and invest in our future.
- Autonomous and Accountable Teams: We trust our team members to take ownership and make smart decisions. We empower you to be your best self!
- An Escalating Bar for Talent and Performance: We're constantly raising the bar and challenging ourselves to be better. We believe in growth and continuous improvement.
- Fundamental Optimism: We see the glass as half full (and then we fill it up with more amazing ideas!). We believe in the power of positivity and the potential for greatness.
- A great 401(k) plan: Our own! Our 401(k) includes a dollar-for-dollar employer match up to 4% of compensation (immediately vested) and $0 plan fees
- Top-of-the-line health plans, as well as dental and vision insurance
- Competitive time off and parental leave
- Addition Wealth: Unlimited access to digital tools, financial professionals, and a knowledge center to help you understand your equity and support your financial wellness
- Lyra: Enhanced Mental Health Support for Employees and dependents
- Carrot: Fertility healthcare and family forming benefits
- Candidly: Student loan resource to help you and your family plan, borrow, and repay student debt
- Monthly work-from-home stipend; quarterly lifestyle stipend
- Engaging team-building experiences, ranging from virtual social events to team offsites, promoting collaboration and camaraderie.
Here’s a list of our awards and accolades:
- Certified as a Great Place To Work® (2023-2025)
- Fortune Best Place to Work in the Bay Area (2024)
- Best Places to Work by Built In (2023-2024)
- America’s Best Startup Employers by Forbes (2020-2022, 2024)
- A Top Company by Y Combinator (2020-2023)
- Inc. Fastest Growing Companies (2021)
We are committed to making every stage of our application process fully accessible to all individuals. If you need a reasonable accommodation at any point in the process, please let us know at [email protected].
Please note Human Interest does not accept unsolicited resumes from any source other than directly from candidates. We will not consider resumes from vendors, including and without limitation search firms, staffing agencies, fee-based referral services, and recruiting agencies.
Pursuant to the San Francisco Fair Chance Ordinance, we will consider employment-qualified applicants with arrest and conviction records. We comply with CCPA guidelines.
See more: https://humaninterest.com/disclosures
Human Interest
A company offering affordable, easy-to-use 401(k) retirement plans for small and medium-sized businesses.
See more jobsSafe Remote Job Search Tips
Verify Employer Thoroughly
Research the company's identity thoroughly before applying. Check for a professional website with contacts, active social media, and LinkedIn profiles. Verify details across platforms and look for reviews on Glassdoor or Trustpilot to confirm legitimacy.
Never Pay to Get a Job
Legitimate employers never require payment for applications, training, background checks, or equipment. Always reject upfront payment requests or demands for bank details, even if they claim it's for purchasing necessary work gear on your behalf.
Safeguard Your Personal Information
Protect sensitive data like SSN, bank details, or ID copies. Share this only after accepting a formal, written job offer. Ensure it's submitted via a secure company system or portal, never through insecure channels like standard email attachments.
Scrutinize Communication & Interviews
Watch for communication red flags: poor grammar, generic emails (@gmail), vague details, or undue pressure. Be highly suspicious of interviews held only via text or chat apps; legitimate companies typically use video or phone calls.
Beware of Unrealistic Offers
If an offer's salary or benefits seem unrealistically high for the work involved, be cautious. Research standard pay for similar roles. Offers that appear 'too good to be true' are often scams designed to lure you into providing information or payment.
Insist on a Formal Contract
Always secure and review a formal, written job offer or employment contract before starting work or sharing final personal details. Ensure it clearly defines your role, compensation, key terms, and conditions to avoid misunderstandings or scams.