Back to jobs
New

Senior Platform Security Engineer

New York City, Hybrid

About Monstro

Monstro is the operating system for governed financial intelligence. We build governance and intelligence infrastructure that enables artificial intelligence to operate safely, explainably, and at institutional scale.

We exist because the level of financial guidance historically available to a small group should be accessible to many more people. By combining AI with deep institutional infrastructure, we help financial institutions deliver more personalized, responsible, and life-changing financial support to millions of individuals.

We’re building mission-critical systems in a highly regulated domain, and we care deeply about doing it right. If you’re motivated by meaningful problems, high standards, and shaping infrastructure that improves financial outcomes, you’ll feel at home here.

About the Role

We're looking for a Senior Platform Security Engineer to help build and secure the infrastructure that powers Monstro's AI platform. This is a hands-on engineering role focused on creating reliable, scalable, and secure systems while embedding security throughout the software development lifecycle.

You'll sit at the intersection of platform engineering, cloud infrastructure, security operations, and compliance. Your mission is to build and maintain scalable, secure, and compliant infrastructure that enables engineering teams to move quickly with confidence. Alongside building and securing our platform, you'll help mature the controls, processes, and evidence required to support compliance initiatives such as SOC 2 and ISO 27001 as Monstro continues to scale. Working with financial institutions requires a high bar for security, governance, and operational resilience, and you'll play a critical role in ensuring our infrastructure meets those expectations without compromising engineering velocity.

As we continue to scale our platform and expand our regulated AI infrastructure, you'll play a key role in designing deployment pipelines, automating infrastructure, strengthening security controls, and driving operational excellence across our cloud environments. You'll help build the technical foundations that allow Monstro to remain secure, compliant, and audit-ready while supporting the rapid development and deployment of AI-powered products.

This is not a role where security operates separately from engineering. We believe the strongest security posture is built into the platform from day one. You'll work closely with software engineers, product teams, and leadership to establish DevSecOps practices that support both innovation and trust.

Security is a strategic priority at Monstro. As a company building infrastructure for financial institutions, we operate in an environment where trust, resilience, and compliance are foundational to our success. This role will have meaningful visibility and influence across the organization, helping shape the systems, controls, and operational practices that protect both our platform and our customers while enabling engineering teams to move quickly and safely.

No two days look the same. You may be improving Kubernetes deployment workflows in the morning, responding to a security alert in the afternoon, helping prepare evidence for a compliance review, and designing infrastructure improvements that reduce operational risk before the day is done.

 

What You'll Own

Platform Engineering & Infrastructure

  • Design, build, and maintain scalable cloud infrastructure across GCP and supporting cloud platforms
  • Implement and manage infrastructure-as-code using Terraform. Experience with Terraform is preferred, though equivalent experience with infrastructure automation tools such as Pulumi, CloudFormation, Ansible, or similar technologies is also valued.
  • Manage containerized environments and orchestration platforms including Docker and Kubernetes
  • Drive reliability, performance, and scalability improvements across production systems
  • Support disaster recovery, business continuity, and infrastructure resilience initiatives
  • Partner with engineering teams to improve developer experience and deployment velocity
  • Partner with AI and product engineering teams to build the infrastructure foundations for agentic systems, enabling secure, scalable, and reliable deployment of AI-powered workflows and services.

DevOps & CI/CD

  • Design, implement, and optimize CI/CD pipelines using GitHub Actions, GitLab CI, Jenkins, Azure DevOps, or similar technologies
  • Automate build, testing, deployment, and operational workflows to reduce manual effort and improve consistency
  • Champion GitOps and infrastructure automation practices across engineering teams
  • Establish monitoring, observability, and alerting frameworks using tools such as Prometheus, Grafana, Datadog, and ELK
  • Improve deployment reliability and operational metrics through continuous platform enhancements

Security Operations & Governance

  • Embed security controls throughout the software development lifecycle through a DevSecOps approach
  • Manage vulnerability scanning, remediation programs, and patch management processes
  • Implement and maintain security monitoring, SIEM tooling, intrusion detection, and threat detection capabilities
  • Manage secrets, credentials, certificates, and key management systems
  • Lead incident response activities, root cause investigations, and post-incident reviews
  • Conduct threat modelling and security risk assessments for new and existing systems
  • Partner with engineering teams to improve security awareness and secure development practices

Cloud Security & Compliance

  • Apply cloud security best practices including least-privilege access controls, encryption, and network segmentation
  • Design and maintain secure networking architectures including VPCs, VPNs, firewalls, load balancers, and zero-trust controls
  • Support compliance initiatives aligned to frameworks such as SOC 2, ISO 27001, CIS Benchmarks, NIST, and GDPR
  • Contribute to audit readiness activities and remediation efforts
  • Help ensure Monstro's infrastructure meets the security expectations required within regulated financial environments

Collaboration & Engineering Excellence

  • Work closely with engineering, product, and leadership teams to build a security-first engineering culture
  • Maintain high-quality technical documentation including runbooks, architecture diagrams, operational procedures, and security policies
  • Lead and participate in on-call rotations and operational incident management
  • Mentor engineers and contribute to knowledge sharing across the organization
  • Help establish best practices that improve reliability, security, and operational maturity as we scale

 

What We're Looking For

  • 7–10+ years of experience in Platform Engineering, DevOps, Site Reliability Engineering, Security Engineering, or related infrastructure roles
  • Proven experience owning and operating production cloud infrastructure in business-critical environments
  • Deep expertise designing and maintaining secure, scalable, and highly available systems on GCP; experience with Azure or AWS is a plus
  • Strong hands-on experience with Kubernetes, container orchestration, and container security in production environments
  • Significant experience building and managing CI/CD pipelines and deployment automation using tools such as GitHub Actions, GitLab CI, Jenkins, or Azure DevOps
  • Expert-level knowledge of Infrastructure-as-Code practices using Terraform, Ansible, Pulumi, or similar technologies
  • Experience embedding security controls throughout the software development lifecycle and driving DevSecOps practices across engineering organizations
  • Strong understanding of cloud security architecture, identity and access management, secrets management, network security, encryption, and zero-trust principles
  • Hands-on experience operating production systems, including monitoring, alerting, observability, incident response, vulnerability management, SIEM tooling, threat detection, and SRE best practices.
  • Experience supporting compliance and governance initiatives aligned with frameworks such as SOC 2, ISO 27001, NIST, CIS Benchmarks, or similar standards
  • Strong scripting and automation skills using Python, Bash, or equivalent technologies
  • Demonstrated ability to lead complex infrastructure, reliability, or security initiatives from design through implementation
  • Comfortable operating with a high degree of autonomy in a fast-moving environment where infrastructure, security, and engineering priorities evolve rapidly
  • A builder's mindset with strong ownership, sound judgment, and a bias toward practical solutions that balance security, reliability, and delivery velocity

Nice to Have

  • Experience working within fintech, BankingTech, AI infrastructure, or other highly regulated industries

 

Why Monstro?

Ownership & Impact: Shape the future of AI-powered finance—building a category-defining product used by consumers and institutions around the world.

Experienced Team: Join a team with leadership that has a track record of scaling companies from early stage to major exits.

Principles-Driven Culture: Work in a culture that values speed, ownership, and impact—what most companies achieve in 90 days, we do in 45.

Comprehensive Compensation Package: Competitive salary, equity, and robust benefits package, including paid health, vision, dental, and disability coverage.

 

Base Compensation Range (New York City): $185,000 - $232,000

Final compensation will depend on a variety of factors, including experience, skills, internal leveling, and market conditions, and will be offered within the stated range in accordance with applicable pay transparency laws.

 

A Note on Interviewing

We sometimes use AI note-takers to help us transcribe interview notes, so we can be more present in your interview. If you'd like to opt out of us using automatic transcribers, please note this in the free text field in your application, otherwise we'll take your application as confirmation that you're happy for us to use note-takers (whether added to video calls or in the background).

 

Ready to Build With Us?

If you're excited to contribute to a high-bar team building something meaningful, we'd love to hear from you.

Apply for this job

*

indicates a required field

Resume/CV*

Accepted file types: pdf, doc, docx, txt, rtf

Select...
Select...
Select...

U.S. Standard Demographic Questions

We invite applicants to share their demographic background. If you choose to complete this survey, your responses may be used to identify areas of improvement in our hiring process.
Select...
Select...
Select...
Select...
Select...
Select...

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiring process or thereafter. Any information that you do provide will be recorded and maintained in a confidential file.

As set forth in Monstro’s Equal Employment Opportunity policy, we do not discriminate on the basis of any protected group status under any applicable law.

Select...
Select...
Race & Ethnicity Definitions

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection. As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measure the effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categories is as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.

Select...

Voluntary Self-Identification of Disability

Form CC-305
Page 1 of 1
OMB Control Number 1250-0005
Expires 04/30/2026

Why are you being asked to complete this form?

We are a federal contractor or subcontractor. The law requires us to provide equal employment opportunity to qualified people with disabilities. We have a goal of having at least 7% of our workers as people with disabilities. The law says we must measure our progress towards this goal. To do this, we must ask applicants and employees if they have a disability or have ever had one. People can become disabled, so we need to ask this question at least every five years.

Completing this form is voluntary, and we hope that you will choose to do so. Your answer is confidential. No one who makes hiring decisions will see it. Your decision to complete the form and your answer will not harm you in any way. If you want to learn more about the law or this form, visit the U.S. Department of Labor’s Office of Federal Contract Compliance Programs (OFCCP) website at www.dol.gov/ofccp.

How do you know if you have a disability?

A disability is a condition that substantially limits one or more of your “major life activities.” If you have or have ever had such a condition, you are a person with a disability. Disabilities include, but are not limited to:

  • Alcohol or other substance use disorder (not currently using drugs illegally)
  • Autoimmune disorder, for example, lupus, fibromyalgia, rheumatoid arthritis, HIV/AIDS
  • Blind or low vision
  • Cancer (past or present)
  • Cardiovascular or heart disease
  • Celiac disease
  • Cerebral palsy
  • Deaf or serious difficulty hearing
  • Diabetes
  • Disfigurement, for example, disfigurement caused by burns, wounds, accidents, or congenital disorders
  • Epilepsy or other seizure disorder
  • Gastrointestinal disorders, for example, Crohn's Disease, irritable bowel syndrome
  • Intellectual or developmental disability
  • Mental health conditions, for example, depression, bipolar disorder, anxiety disorder, schizophrenia, PTSD
  • Missing limbs or partially missing limbs
  • Mobility impairment, benefiting from the use of a wheelchair, scooter, walker, leg brace(s) and/or other supports
  • Nervous system condition, for example, migraine headaches, Parkinson’s disease, multiple sclerosis (MS)
  • Neurodivergence, for example, attention-deficit/hyperactivity disorder (ADHD), autism spectrum disorder, dyslexia, dyspraxia, other learning disabilities
  • Partial or complete paralysis (any cause)
  • Pulmonary or respiratory conditions, for example, tuberculosis, asthma, emphysema
  • Short stature (dwarfism)
  • Traumatic brain injury
Select...

PUBLIC BURDEN STATEMENT: According to the Paperwork Reduction Act of 1995 no persons are required to respond to a collection of information unless such collection displays a valid OMB control number. This survey should take about 5 minutes to complete.