Senior Platform Security Engineer

Financial institutions process billions of transactions every day across cards, ACH, wires, and third party aggregators. But most of that data is difficult to use. Descriptions are inconsistent, merchant names don’t match, and categories vary by payment type.

Spade is a data and AI platform that turns messy transaction strings into structured, verified records — and gives teams the tools to act on it across authorization, attribution, analytics, and AI initiatives. Spade leads the market in terms of merchant coverage, matching accuracy, geolocation data, and speed of transaction enrichment. Customers such as, FIS, Bilt, Mercury, Stripe, alongside many other leaders in fintech and financial services, trust Spade's data to enable personalized rewards programs, accurate applied spending rules, precise analytics requests, and innovative AI-powered features.

Spade is a fast growing, Series B company backed by industry experts and top tier investors (including Oak HC/FT, a16z, Flourish Ventures, Y-Combinator, and Gradient Ventures). We’re a lean and execution-oriented hybrid team, passionate about building exceptional products for our growing customer base. We care deeply about diversity of background, experience, and opinion. We value empathy, curiosity, and passion, and strive to create an environment where individuals have autonomy and the ability to take ownership over their work.

As a Senior Platform Security Engineer, you'll own the security of Spade's production edge that connects us to our enterprise bank customers. You'll work across certificate lifecycle operations, network security architecture, and vulnerability management on a small, high-ownership team where your decisions directly protect the systems processing billions of transactions.

Own and operate mutual-TLS certificate infrastructure for enterprise bank onboarding and product operations

Build and maintain the security workflow for private network connectivity, including endpoint tenancy mapping and connection monitoring

Operate webhook delivery security from signing-secret rotation, client-certificate management, and delivery-failure response for outbound integrations

Drive vulnerability remediation end-to-end from application and infrastructure scanning through verified closure

Set and codify secure-build standards for the engineering team

Continuously improve our security posture by collaborating across engineering, product, and go-to-market to deliver value to customers and internal stakeholders

Must-have:

6+ years of experience in platform, infrastructure, or network security engineering, with hands-on ownership of production systems

Deep experience with PKI and certificate lifecycle management

Strong understanding of TLS/mTLS

Hands-on AWS networking and security experience

Working knowledge of OAuth 2.0 (client-credentials flow, JWT validation) and familiarity with certificate-bound token patterns

Experience setting security standards and working with engineering teams to adopt them

Nice-to-have:

Fintech or payments background; experience integrating with bank or financial institution network edges

Experience with cloud infrastructure and tools like AWS CDK

PCI DSS or SOC 2 technical control implementation

Prior experience on a small or early-stage security team

Be a cultural founder. As an early employee, you’ll play a meaningful role in defining and building our culture.

Get in on the ground floor. We’re a small but well-funded team – joining now comes with limited risk and unlimited upside.

Build the next generation of financial infrastructure. Our products will power the next wave of innovation in fintech, helping our customers deliver better, more transparent products and services to the consumer.

Competitive Compensation. Data-driven salaries that reward performance and ownership.

Meaningful Equity. Flexibility with early exercise and an extended post-termination options.

Comprehensive Health Benefits. 100% paid medical, mental, dental, and vision premium option plus One Medical membership (for US-based employees).

401(k). Empowe…