Senior Information Security Engineer

📋 Job Overview

B2B payments are a multi-trillion-dollar industry and, as the industry pushes further into digitization and faster settlement, fraud has become a massive problem — to the tune of $43B in annual losses. Walrus is the leader in B2B payment verification, with clients that include some of the biggest names in investment management. Our DoubleCheck platform combines advanced authentication, proprietary technology, AI, and novel UX to collect and confirm payment details. DoubleCheck has defined a new category: verifying the safe transfer of financial information and assets.

🏢 About Walrus

Walrus is led by PhD computer scientists and security researchers, with decades of experience in engineering, cybersecurity, and cryptography, and many research accomplishments at Harvard, Stanford, MIT, the University of Chicago, Columbia, UTexas, and NYU. We’re backed by one of the world's leading fintech VC funds, as well as founders and former executives of Twitter, Google Maps, Databricks, and Kayak.

🎯 The Role

You will own the security of Walrus itself: our production systems, our company accounts and devices, and the evidence our clients and auditors ask for. Clients trust us to stop payment fraud, so our own security is part of what we sell. This is a hands-on engineering job, and you will make the changes yourself.

✅ Key Responsibilities

• Access and identity: cloud access policies and organization controls, and access to production and production data.
• Devices and accounts: device management, endpoint protection, browser and editor extensions, and our core company accounts.
• Vulnerabilities: patching dependencies quickly, running penetration tests, and fixing what they find.
• Compliance: backups and retention, audits, and the technical side of client security questionnaires.
• Developer platform: CI, the test suite, build and update scripts, and developer documentation.

📌 Required Qualifications

• You have secured a company’s cloud accounts, devices and access yourself.
• You have run production systems for a web application and been on call for them.
• You write code. Most of this job is automation, in a Python and Google Cloud codebase alongside the product engineers.
• You work without hand-holding: you find the biggest risk or the most fragile system, fix it, and tell people what you did.
• You have a solid understanding of both the strengths and weaknesses of AI tools.
• You can explain a security or reliability trade-off to someone who isn’t an engineer.

🎁 Benefits

• Competitive compensation and benefits, including salary, equity, paid medical insurance, dental, vision, company contribution to wellness, good coverage for dependents, parental leave, retirement, relocation assistance, and flexible PTO.

🛂 Visa & Eligibility

• Applicants must be authorized to work for any employer in the U.S. We are unable to sponsor or take over sponsorship of an employment visa at this time.