Senior Security Engineer

About Bluevine

Bluevine is the largest small business banking platform in the U.S., redefining how entrepreneurs manage their money. We create modern financial solutions, from checking and lending to payments and beyond, designed to help small business owners grow, thrive, and take control of their financial future. Our best-in-class technology, advanced security, and deep understanding of the small business community give our customers the confidence to focus on what they do best.

Since 2013, we’ve supported more than 750,000 small businesses nationwide. Backed by leading investors like Lightspeed Venture Partners, Menlo Ventures, 83North, and Citi Ventures, our 500+ person global team shares one mission: to give small businesses the financial tools they need to succeed.

We’re innovators driven by big ideas, collaboration, and real impact. Here, you’ll have the freedom to take ownership, grow your career, and make a difference for small business owners across America. Ready to shape what’s next?

Bluevine is looking for a Senior Cloud Information Security Engineer to join our Security team and take a key role in securing our cloud infrastructure and production environments.

This is a hands-on Senior Individual Contributor role with strong technical ownership. You’ll design and own cloud-native security solutions, work closely with DevOps and R&D, and directly impact Bluevine’s overall security posture in a fast-paced fintech environment.

What You'll Do:

• Own and drive the design, implementation, and long-term ownership of cloud security controls and architectures (AWS preferred), applying security-by-design principles
• Continuously assess and improve cloud security posture through vulnerability management and risk assessments
• Design and manage IAM roles, policies, and access models across cloud environments
• Design, implement, and manage firewall and WAF policies for cloud applications and network perimeters
• Own cloud-related security incident investigations and response efforts
• Partner closely with DevOps and R&D to embed security into architecture and deployment processes
• Define and evolve cloud security standards, policies, and best practices
• Drive complex security initiatives end-to-end, from design through long-term ownership
  
  

• +3 years of experience in Information Security, with a strong focus on cloud and infrastructure security, including hands-on experience with a major Cloud IaaS provider (AWS preferred)
• Deep hands-on experience with Linux systems
• Strong networking expertise, including troubleshooting across all OSI layers
• Deep understanding of modern cloud-based applications and APIs (HTTP/S, PKI, microservices, load balancers, firewalls, WAF), with hands-on experience operating security platforms such as WAFs, LBs, VPNs, vulnerability scanners, and directory services
• Strong passion for security automation, with scripting experience (Bash and/or Python)
• Solid understanding of risk assessment and the ability to clearly communicate security and privacy considerations to technical and non-technical stakeholders
• Independent, proactive, and self-driven, with a strong ownership mindset
  
  

• Background in penetration testing, code review, and system/application hardening
• Experience with containers, orchestration platforms, and Infrastructure as Code (IaC)
• Experience with SIEM platforms or large-scale log management solutions
• Hands-on experience with identity providers and SSO solutions (e.g. Okta)
  
  

• Excellent group health coverage and life insurance benefits
• Stock options
• Flexible hybrid work model
• Large Study Fund contribution
• Salary Benchmarks and Checkpoints
• Monthly meal card of TenBis or CiBus (your choice) with generous balance
• Free parking for cars, scooters, and bikes
• Free gym membership
• Company-sponsored Mental Health Benefits
• PTO, Company Holidays, and Flexible Holidays
• Community-based volunteering opportunities