Lead security initiatives at SentiLink, enhancing infrastructure and applications in a fast-paced, hybrid work environment.
Posted by employer 5 months ago
First seen on Joblaze 2 months ago
Last verified on the company career page 6 hours ago
Role intensity
70% hands-on coding
AI in the day-to-day
Develop AI-assisted and agent-based tooling to scale offensive security testing.
Requirements
Not disclosed in this posting: visa sponsorship.
Benefits
Joblaze summary
The Principal Information Security Engineer at SentiLink is responsible for enhancing security across the company's infrastructure and applications, focusing on building scalable security solutions while enabling rapid business operations. This role requires expertise in AWS, proficiency in multiple programming languages, and a strong background in security engineering, particularly in penetration testing and vulnerability assessment. Ideal candidates will have significant experience in fast-paced environments and a track record of developing security automation tools. SentiLink's collaborative culture spans teams in the U.S. and India, emphasizing a digital-first approach.
Joblaze insights
Quick facts
From the original posting
We’re looking for a Principal Software Engineer, Product Security to lead and elevate security across SentiLink’s infrastructure, applications, and internal systems. This is a highly technical, hands-on role focused on building scalable security foundations while enabling the business to move quickly and safely.
You will partner closely with Engineering, Infrastructure, Product, Legal, and Compliance teams to design secure systems, improve detection and response capabilities, strengthen cloud security posture, and reduce organizational risk. You’ll help shape long-term security strategy while remaining deeply involved in technical implementation and operational execution.
This role is best suited for someone who combines strong technical depth with practical judgment and thrives in fast-moving, high-ownership environments.
Design and build internal security tooling from scratch, including agent-based security tooling, code analysis tooling, dynamic scanning, and security assessment tools
Identify vulnerabilities across SentiLink's AWS-based stack, including application code, cloud service configurations, and integrations between the two
Develop AI-assisted and agent-based tooling to scale offensive security testing beyond what a small team can do manually
Build and maintain security automation that improves detection, response, and remediation across the organization
Conduct hands-on penetration testing and vulnerability research against SentiLink's infrastructure and applications
Partner with engineering teams to remediate findings and embed security into the development process without slowing them down
Participate in the security on-call rotation, including incident response and regular response testing
Contribute to threat modeling and security design reviews for new systems, with a focus on cloud integrations and identity flows
Stay current on offensive security techniques, AI-assisted security tooling, and emerging attack patterns relevant to fintech and identity verification
8+ years of experience in security engineering, software engineering with a security focus, or closely related roles
Proficient in at least one systems language (Go, Rust, C++) and at least one higher-level language (Python, TypeScript)
Proven ability to design and ship production software end-to-end
Deep AWS infrastructure expertise, including IAM, EKS, RDS, networking, and managed services
Proficiency with using an AI tool such as Claude Code, ChatGPT/Codex, Cursor or another similar tool
Demonstrated ability to identify security misconfigurations and vulnerabilities across cloud architectures, application code, and the integrations between them
Experience conducting or building tooling for penetration testing, vulnerability assessment, or red team activities
Track record of building security automation and tooling from scratch
Comfortable operating independently on ambiguous problems without heavy process or oversight
Strong communication skills and the ability to partner with engineers who are not security specialists
Experience building or deploying LLM-based agents or AI-assisted security tooling
Prior experience at a security product company (Wiz, Snyk, Datadog, etc.) or other security-forward engineering org
Prior fintech, identity, or fraud detection experience
Industry certifications (OSCP, OSCE, GPEN, GXPN)
Experience with detection engineering or SIEM platforms
Published security research, CVEs, or open source security tooling contributions
Experience supporting compliance frameworks (FedRAMP, SOC 2, PCI DSS) without it being their primary focus
$220k-300k/year + equity + benefits
Employer paid group health insurance for you and your dependents
Flexible paid time off
Regular company-wide in-person events
Home office stipend, and more!
Follow Through
Deep Understanding
Whatever It Takes
Do Something Smart
Standard company text repeated across SentiLink's postings is omitted here.