Senior Security Engineer

We're looking for a senior security engineer who breaks things so our members never have to worry.

About the Role

You will be the person who keeps our members' financial lives safe. Range handles sensitive data across investments, taxes, retirement, and estate planning. That means security isn't a side function here. It's foundational.

You'll think like an attacker so we can build like defenders. You'll probe our AI systems, infrastructure, and applications for weaknesses before anyone else can find them. When you find something, you won't just write it up. You'll work directly with engineers to fix it. When you see a gap in how we detect or respond to threats, you'll close it yourself.

You'll also help us think about what's next. AI introduces new attack surfaces that most security playbooks don't cover yet. Training pipelines, inference systems, model architectures, supply chain risks. You'll be the person figuring out what those threats actually look like for a fintech company and what we need to do about them.

We think really big, but we ship small and incrementally. You'll build automated tools to scale what you do, contribute to how we measure security as a program, and help the whole engineering team raise their security instincts. At Range, security engineers are builders, not gatekeepers.

Responsibilities

Keep members' financial lives safe; Think like an attacker so we can build like defenders; Probe AI systems, infrastructure, and applications for weaknesses; Work directly with engineers to fix findings; Close gaps in how we detect or respond to threats; Help determine AI-specific attack surfaces for a fintech company; Build automated tools to scale security work; Contribute to how we measure security as a program; Help engineering team raise their security instincts

Requirements

6+ years of professional security engineering experience; Deep hands-on experience with offensive security: red teaming, penetration testing, or vulnerability research; Experience assessing cloud infrastructure security, preferably AWS (EC2, ECS, RDS, S3, IAM, and similar); Ability to develop custom tools and automation for security testing (Python, Go, or similar); Experience analyzing and exploiting web application vulnerabilities; Strong understanding of threat actor techniques, tactics, and procedures; Ability to translate technical security findings into clear, actionable recommendations for engineering teams; Bachelor's degree in Computer Science, Cybersecurity, or a related field, or equivalent practical experience

Nice to have

Experience with AI/ML system security: training pipelines, inference systems, model architectures; Familiarity with AI-specific attack vectors such as prompt injection, model poisoning, or data extraction; Fintech or financial services security experience; Experience building security metrics and reporting frameworks; Startup experience; Relevant certifications (OSCP, OSCE, GXPN, or similar)

Benefits

100% employer-covered medical insurance for employees (75% for dependents), plus dental and vision coverage; 401(k) retirement savings program; Paid Time Off; Parental Leave; Select meals covered throughout the week; Monthly movement stipend; Equity & Career Growth with early exercise eligibility; Annual Compensation Reviews; Boomerang Program