Director Security Engineering

MX is a fintech company on a mission to empower the world to be financially strong. We build technology that helps banks, credit unions, and fintechs deliver smarter, more intuitive financial experiences to millions of people.

Like many startups, we’ve navigated real growth challenges – and we’ve come out stronger on the other side. Today, MX is in a phase of renewed momentum and scale, with a solid foundation and a clear vision for what’s next. This is a place where thoughtful execution matters, innovation is encouraged, and individuals have real ownership over their work.

Our culture values curiosity, accountability, and impact. We give people the space to question assumptions, design better solutions, and help shape how the company grows. If you’re looking to do meaningful work, influence outcomes, and grow alongside a company that’s ready to move fast, you’ll feel at home at MX.

As a Director of Security Engineering, you’ll work to mature our operational security capabilities, evolve our threat detection and response program, and drive strategic improvements. The role requires a hands‑on, data‑driven leader who can lead day‑to‑day operations, shape the organization’s strategic direction, and provide tactical support when needed.

• Drive the use of GenAI and Agentic AI to make security functions more efficient and effective.
• Deeply secure Generative AI (GenAI) models and related data pipelines, including prompt injection mitigation and LLM security to enable our engineering teams.
• Secure agentic AI systems, focusing on runtime protection, secure communication between agents, and mitigating risks associated with autonomous operations.
• Apply modern cloud and network security principles, especially in AWS and GCP.
• Execute and lead all security engineering verticals, from product design reviews to CI/CD security to runtime security.
• Develop and refine the overall vision and strategy for the Security Engineering and Operations program, aligning it with business objectives, risk appetite, and industry best practices.
• Lead, mentor, and develop a high‑performing team of cybersecurity engineers, focusing on the concepts of service ownership and outcome metrics.
• Continuously evaluate and improve engineering processes and system/control performance, identifying areas for automation and optimization.
• Partner with cross‑functional teams to perform product requirements analysis and design reviews, ensuring protection of customer data and platform integrity.
• Evaluate, select, and implement security technology solutions and tools, especially in AWS cloud environments, and integrate them with existing security systems.
• Develop and maintain key performance indicators (KPIs) and metrics to track security technologies and the overall engineering program.
• Collaborate with the Governance, Risk, and Compliance (GRC) team to balance controls with engineering velocity and maintain compliance with PCI DSS, SOC 2, and NIST frameworks.
• Effectively communicate security program status to technical and non‑technical audiences and cultivate a culture of security across MX.
• Serve as a strategic partner to all business teams to reduce technical debt and implement pragmatic, risk‑based, scalable solutions.

You will be part of a security‑minded team that believes in progress over perfection and where both security culture and mindset are key. Our team is rethinking how security operations can be accomplished in innovative ways. We focus on enabling our business to deliver world‑class services while minimizing and managing risk exposure for MX and its customers.

• 10+ years of experience in cybersecurity, security engineering, or related fields.
• 5+ years in a leadership role overseeing security operations or engineering teams.
• 5+ years of hands‑on experience in cloud security, particularly in AWS or GCP environments.
• 3+ years of experience securing Generative AI (GenAI) systems, including LLM security, prompt injection mitigation, and data pipeline protection.

• Experience securing agentic AI systems, including runtime protection and secure…