Principal Software Engineer, Product Security
SentiLinkUnited States · Remote · Lead / Staff / Principal
$220,000 – $300,000
Listed on SentiLink’s own careers site. You apply with them directly — we never stand between you and the employer.
What this role is
SentiLink is seeking a hands-on security leader to design and build security tooling, conduct penetration testing, and embed security practices across their fraud-detection platform. This role suits experienced security engineers who want deep technical involvement alongside strategic security architecture at a well-funded fintech company protecting millions of identities daily.
Our summary, not SentiLink’s wording. The full posting is on their site.
Skills this role names
- Amazon EKS
- Amazon RDS
- Amazon Web Services (AWS)
- C++
- Cloud Security
- Go
- Penetration Testing
- Python
- Rust
- Threat Modeling
- TypeScript
Log in to see which of these are already on your profile.
What they ask for
Required
- 8+ years security engineering or software engineering with security focus
- Proficiency in at least one systems language (Go, Rust, or C++)
- Proficiency in at least one higher-level language (Python or TypeScript)
- Proven ability to design and ship production software end-to-end
- Deep AWS infrastructure expertise including IAM, EKS, RDS, networking, and managed services
- Ability to identify security misconfigurations and vulnerabilities across cloud architectures and application code
- Experience conducting or building tooling for penetration testing, vulnerability assessment, or red team activities
- Track record of building security automation and tooling from scratch
- Comfortable operating independently on ambiguous problems
- Strong communication skills and ability to partner with non-security engineers
Nice to have
- Experience building or deploying LLM-based agents or AI-assisted security tooling
- Prior experience at a security product company or security-forward engineering org
- Prior fintech, identity, or fraud detection experience
- Industry certifications (OSCP, OSCE, GPEN, GXPN)
- Experience with detection engineering or SIEM platforms
- Published security research, CVEs, or open source security tooling contributions
- Experience supporting compliance frameworks (FedRAMP, SOC 2, PCI DSS)