Skip to the page

Principal Software Engineer, Product Security

SentilinkAshbyUnited States
Posted 28 MayFound 14 OctSeen 4 hours ago

Fit

The keywords the posting names, against what your resume says.

Add your resume to see which of its keywords you already have, and get a resume tailored to this posting. 10 a month, free.

The Posting

SentiLink https://www.sentilink.com/ helps institutions and protects customers by accurately resolving identities and flagging fraud risk. Each day, we verify more than 3 million identities, flagging 150k+ fraud attempts in the process. The problems we work on are challenging, and solving them takes deep domain expertise, rigorous analysis, and a willingness to dig into the details.

At SentiLink, you'll work alongside smart, highly collaborative colleagues who respect each other's time and judgment, take ownership, and follow through on their commitments. Together, we do truly meaningful work protecting the identities of innocent consumers and flagging the fraudsters attempting to exploit them.

We're well capitalized and growing quickly. We already serve 13 of the top 15 U.S. banks, we're expanding into new markets, and we're backed by Craft Ventures, Andreessen Horowitz, NYCA, and Max Levchin. We've been named to the Forbes Fintech 50 https://www.forbes.com/companies/sentilink/?list=fintech50 and as a 2026 FICO Industry Vanguard Decision Award Winner https://www.businesswire.com/news/home/20260330439998/en/SentiLink-Named-a-2026-FICO-Industry-Vanguard-Decision-Award-Winner-for-Leadership-in-Identity-Theft-Detection. We were also the first company to go live https://resources.sentilink.com/blog/sentilink-makes-history-as-first-ecbsv-provider with the electronic Consent Based Social Security Number Verification (eCBSV) service, and we've testified before the U.S. Congress https://resources.sentilink.com/media/dr.-david-maimons-congressional-testimony-on-emerging-fraud-threats-and-the-evolving-fraud-landscape on the future of identity.

We want SentiLink to be the best place you've ever worked. We offer generous benefits and support a range of working arrangements, from fully remote to in-office. We are a digital-first company with strong collaboration across the U.S. and India, and we meet in person regularly to build relationships. We have offices in Austin, San Francisco, New York City, Seattle (Bellevue), Los Angeles, and Chicago in the U.S., and in Gurugram (Delhi) and Bengaluru in India.

ROLE:

We’re looking for a Principal Software Engineer, Product Security to lead and elevate security across SentiLink’s infrastructure, applications, and internal systems. This is a highly technical, hands-on role focused on building scalable security foundations while enabling the business to move quickly and safely.

You will partner closely with Engineering, Infrastructure, Product, Legal, and Compliance teams to design secure systems, improve detection and response capabilities, strengthen cloud security posture, and reduce organizational risk. You’ll help shape long-term security strategy while remaining deeply involved in technical implementation and operational execution.

This role is best suited for someone who combines strong technical depth with practical judgment and thrives in fast-moving, high-ownership environments.

RESPONSIBILITIES:

  • Design and build internal security tooling from scratch, including agent-based security tooling, code analysis tooling, dynamic scanning, and security assessment tools
  • Identify vulnerabilities across SentiLink's AWS-based stack, including application code, cloud service configurations, and integrations between the two
  • Develop AI-assisted and agent-based tooling to scale offensive security testing beyond what a small team can do manually
  • Build and maintain security automation that improves detection, response, and remediation across the organization
  • Conduct hands-on penetration testing and vulnerability research against SentiLink's infrastructure and applications
  • Partner with engineering teams to remediate findings and embed security into the development process without slowing them down
  • Participate in the security on-call rotation, including incident response and regular response testing
  • Contribute to threat modeling and security design reviews for new systems, with a focus on cloud integrations and identity flows
  • Stay current on offensive security techniques, AI-assisted security tooling, and emerging attack patterns relevant to fintech and identity verification

REQUIREMENTS:

  • 8+ years of experience in security engineering, software engineering with a security focus, or closely related roles
  • Proficient in at least one systems language (Go, Rust, C++) and at least one higher-level language (Python, TypeScript)
  • Proven ability to design and ship production software end-to-end
  • Deep AWS infrastructure expertise, including IAM, EKS, RDS, networking, and managed services
  • Proficiency with using an AI tool such as Claude Code, ChatGPT/Codex, Cursor or another similar tool
  • Demonstrated ability to identify security misconfigurations and vulnerabilities across cloud architectures, application code, and the integrations between them
  • Experience conducting or building tooling for penetration testing, vulnerability assessment, or red team activities
  • Track record of building security automation and tooling from scratch
  • Comfortable operating independently on ambiguous problems without heavy process or oversight
  • Strong communication skills and the ability to partner with engineers who are not security specialists

NICE TO HAVE:

  • Experience building or deploying LLM-based agents or AI-assisted security tooling
  • Prior experience at a security product company (Wiz, Snyk, Datadog, etc.) or other security-forward engineering org
  • Prior fintech, identity, or fraud detection experience
  • Industry certifications (OSCP, OSCE, GPEN, GXPN)
  • Experience with detection engineering or SIEM platforms
  • Published security research, CVEs, or open source security tooling contributions
  • Experience supporting compliance frameworks (FedRAMP, SOC 2, PCI DSS) without it being their primary focus

COMPENSATION:

$220k-300k/year + equity + benefits

PERKS:

  • Employer paid group health insurance for you and your dependents
  • 401(k) plan with employer match (or equivalent for non US-based roles)
  • Flexible paid time off
  • Regular company-wide in-person events
  • Home office stipend, and more!

CORPORATE VALUES:

  • Follow Through
  • Deep Understanding
  • Whatever It Takes
  • Do Something Smart

Facts

Source
Ashby
External id
48ebd3af-54cd-429a-ae59-256feea94cdf
Location
United States
Remote
Remote, from the posting
Employment
Full time
Posted
28 May 2026, 21:36
First seen
14 Oct 2026, 16:33
Last seen
1 Nov 2026, 21:54
Status
Not yet added
Posting id
8ce47c89-f6ff-5e46-aab5-e5301f5d325f