This role is about staying two steps ahead of the people who want to break into our systems. You'll run vulnerability assessments, harden our cloud infrastructure, and work with engineering teams to fix issues before they ship, not after. We want someone who can explain risk to non-technical stakeholders without watering down the actual problem, and who's just as comfortable in a code review as in an audit prep meeting.
What you'll do
- Conduct security assessments and penetration tests against internal and external systems
- Review architecture and code changes for security risks before release
- Harden cloud infrastructure configurations across AWS and Kubernetes
- Build and tune detection rules for suspicious activity and anomalies
- Lead incident response for security events and coordinate remediation
- Own vendor security reviews and support SOC 2 / compliance audits
What we're looking for
- 5+ years in application or infrastructure security roles
- Hands-on experience with penetration testing and vulnerability scanning tools
- Strong understanding of cloud security in AWS or GCP environments
- Familiarity with OWASP Top 10 and secure coding practices
- Experience supporting compliance frameworks such as SOC 2 or ISO 27001
- Ability to communicate risk clearly to engineers and executives alike
Nice to have
- Relevant certifications (OSCP, CISSP, or similar)
- Experience building a security champions program across engineering teams
- Background in incident response for a SaaS company
About Mintbook
About Mintbook: Mintbook builds accounting and invoicing software designed for small business owners first, with support from a team that includes former bookkeepers. Headquartered in New York with a support office in Phoenix, we're focused on making small business finances less confusing, one reconciliation at a time.
Apply for this roleTakes ~4 minutes · 130 people have applied