Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 26 days ago

Senior Engineer, Security

Taptap Send28 open roles

Where
New York
Work mode
Remote
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSenior Engineer, SecurityTaptap Send · New York

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Taptap Send's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.3% of postings close within 7 days. Measured by our own scanner across the market. Taptap Send postings stay open a median of 55 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.3%7 days
  4. 19.3%14 days
  5. 35.6%30 days
  6. 57.8%60 days
This job: posted 26 days ago

Taptap Send median: 55 days open

The posting

THE ROLE

We are looking for a Senior Engineer, Security to join our Platform Engineering team. This is a find-and-fix role. When you find a vulnerability in our infrastructure, you write the Terraform or the application change that closes it. Where the fix belongs to another team, you drive it to completion, with the CISO supporting you.

You will report into Platform Engineering and work closely with our CISO, who sets the security agenda and is your escalation route when remediation stalls elsewhere.

RESPONSIBILITIES

- Fix it, don't just find it: Remediate security findings across our infrastructure, writing the Terraform and application changes that close them. Where the fix belongs to another team, drive it to completion. Run vulnerability management from Snyk, Prowler, and ASV findings through to verified fixes.

- Own AWS security: Cloud posture across IAM and least privilege, network boundaries, secrets management, and logging coverage. Define the technical security baselines new services are built to, covering host hardening, WAF configuration and deployment patterns, and enforce them as code.

- Find problems before anyone else does: Regular penetration testing against our own environment, ahead of the formal annual assessment carried out by our external testers. Threat modelling and security review for new services early enough to change the design, including our integrations with payment and custody providers.

- Respond when it matters: Serve as technical lead for security incidents, including forensic investigation. Own and improve detection coverage in Datadog, tuning alerts for signals.

WHAT YOU NEED

- Five or more years in hands-on security engineering, with responsibility for production systems.

- You write and ship code. Terraform and Python, and enough application fluency to fix what you find rather than hand it off.

- Deep AWS security experience, including IAM and least privilege at organization scale, and container workloads in ECS or EKS.

- Application security, including threat modelling and hands-on offensive testing against cloud and application targets.

- Security incident response, including forensic investigation.

- You have run vulnerability management and driven fixes through teams you do not manage; you work the finding queue on your own initiative, without being chased.

- You have worked in a regulated environment and turned ISO 27001, PCI DSS, or SOC 2 requirements into engineering work.

- Detection engineering in Datadog, or a comparable SIEM.

- Securing CI/CD pipelines, particularly GitHub Actions.

- Cryptography and secrets management in practice, including key rotation and certificate lifecycle.

- Using AI coding tools to remediate at scale, and reviewing AI-generated code with a security eye

- Experience with payments, cards, or digital assets.

About Us

We’re building the world’s leading cross-border fintech for emerging markets - empowering families, fuelling local economies, and changing how millions access financial services.

Since our launch in 2019, we have transformed how money moves across borders with our operations spanning 6 out of 7 continents and covering both the busiest and most underserved (remittance) corridors. We tapped into a massive shift - from banks to phones - bringing digital finance to places where traditional systems never reached. The next stage of growth will fuel a network of services and products especially designed to make money more accessible to diaspora communities including local cards, and additional savings and payments features.

We’re growing fast, backed by world-class investors, and scaling a product that blends real world impact with cutting edge fintech innovation.

Here’s a little more:

- Founded by Harvard grads and 3-time founders who previously built Segovia (acquired) and GiveDirectly (>$300M revenue, fastest-growing NGO in the world)

- Backed by top investors including Spark Capital, Canaan, Reid Hoffman, Breyer Capital, Unbound, Wamda, and more

- Built by global top performers from Bain, Google, McKinsey, Uber, Checkout, Bolt, and beyond - we move fast, stay humble, and care deeply about our mission

- Truly global team - 250+ people, 50+ nationalities, 50+ languages

- Guided by our values - ownership, impact, humility, and heart - in deed, not just word

TAPTAP VALUES https://www.taptapsend.com/our-values

Impact first

Team next

Accept reality

Propose solutions

Win with grit

Be proactively candid, with yourself and others

Love the particular

Own it

Create positive energy

Maybe, even have fun

Taptap Send is an equal opportunity employer dedicated to building an inclusive and diverse workforce. All employment decisions are decided on the basis of qualifications, experience and business need. We strongly encourage applications who are members of underrepresented communities to apply.

If you require reasonable adjustments to be made during the recruitment process, please do not hesitate to let us know. Any information you provide us in this respect will only be used to accommodate your requirements.

Note: we recognize imposter syndrome is real - any candidate that does not perfectly fit every characteristic of this role is still strongly encouraged to apply.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Taptap Send's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Taptap Send's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Taptap Send's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.