About the job
Self Financial, based in Austin, TX, is a FinTech company dedicated to expanding economic inclusion by making credit-building tools accessible, particularly for people with limited or no credit history. The company values diversity and inclusion, aiming to build a team with a wide range of backgrounds and perspectives.
Role overview
The Principal Information Security Engineer leads cybersecurity operations across all Self Financial products and infrastructure. This role is responsible for protecting customer data, maintaining SOC 2 and PCI compliance, and collaborating with engineering and IT teams to identify, investigate, and address security threats. Strong experience in security operations, threat detection, and incident response is required, along with a proven ability to build and enhance security capabilities.
Key responsibilities
- Direct cybersecurity operations, including threat detection, incident response, and vulnerability management for Self Financial’s products and infrastructure.
- Develop, refine, and maintain threat detection within a SIEM platform to identify anomalies and policy violations.
- Manage and improve endpoint detection and response (EDR) tools, including alert triage, threat hunting, and incident containment.
- Oversee cloud security posture by identifying misconfigurations, prioritizing risks, and tracking remediation efforts.
- Administer secure access and web security systems, enforce data loss prevention policies, monitor for shadow IT, and protect against web threats.
- Design and manage network security controls and cloud-native networking to support zero-trust principles and perimeter security.
- Lead incident response activities and investigations to strengthen the company’s security posture.
