Senior Security Engineer, Product Security - Remote

Overview

Come build at the intersection of AI and fintech. At Ocrolus, we’re on a mission to help lenders automate workflows with confidence—streamlining how financial institutions evaluate borrowers and enabling faster, more accurate lending decisions.

Our AI-powered data and analytics platform is trusted at scale, processing nearly one million credit applications every month across small business, mortgage, and consumer lending. By integrating state-of-the-art open- and closed-source AI models with our human-in-the-loop verification engine, Ocrolus captures data from financial documents with over 99% accuracy. Thanks to our advanced fraud detection and comprehensive cash flow and income analytics, our customers achieve greater efficiency in risk management, and provide expanded access to credit—ultimately creating a more inclusive financial system.

Trusted by more than 400 customers—including industry leaders like Better Mortgage, Brex, Enova, Nova Credit, PayPal, Plaid, SoFi, and Square—Ocrolus stands at the forefront of AI innovation in fintech. Join us, and help redefine how the world’s most innovative lenders do business.

In Short

• Work closely with the CISO to build the product security strategy, roadmap, and metrics.
• Conduct design and architecture reviews for products and infrastructure.
• Perform code reviews and application security assessments, including AI/LLMs.
• Engage with development teams for secure design reviews/threat modeling.
• Identify vulnerabilities and work with developers on mitigation plans.
• Run penetration testing on critical data, services, and environments.
• Write and disseminate security guidelines for common issues.
• Collaborate on secure deployment of AI systems and adversarial testing.
• Guide engineering teams on secure coding principles.
• Spread security culture throughout the organization.

Requirements

• Passion for identifying vulnerabilities and remediations.
• Ability to explain vulnerabilities to various audiences.
• Experience in designing and building technical security controls.
• Experience in threat modeling, design reviews, and penetration testing.
• Understanding of secure software development lifecycle (SDLC).
• Ability to automate security processes and optimize productivity.
• Proficiency with programming languages (Java, Python, Go, Bash).
• Knowledge of authentication, authorization, and secure network protocols.
• Experience in cloud security architecture.
• 5+ years of experience in product security.

Benefits

• Fast-growing, remote-first company.
• Environment for skill growth and ownership of work.
• Inclusive workplace fostering diverse perspectives.
• Core values of empathy, curiosity, humility, and ownership.