Software Engineer, Security

We are looking for a Security Engineer with 2-8 years of experience to be the first dedicated security hire at Slash and own the entire security program end-to-end. This is a generalist role – you'll work across the full stack from infrastructure hardening to application security, driving high-impact changes independently. You'll manage penetration tests, coordinate vulnerability remediation, and support compliance efforts while shipping real security improvements to a platform that processes billions of dollars in business spend. This person will report directly to the CTO and eventually become the sole owner of security at Slash.

What you will be doing

- Owning and building out Slash's security program from the ground up – finding gaps, prioritizing work, and driving changes across infrastructure and application layers

- Hardening cloud infrastructure and server configurations, including AWS, Kubernetes/EKS, and network security posture

- Managing recurring penetration tests and the bug bounty program, triaging vulnerability reports, and coordinating remediation across engineering teams

- Supporting compliance initiatives (SOC 2, PCI) by owning the engineering-related work needed to meet requirements

- Working cross-functionally with compliance, engineering, and other teams to push security improvements forward