# Security Engineer at Thunes

> United States · Unspecified · Security · open. Source: https://alderhq.app/jobs/greenhouse%3Athunes%3A7685432003 (read 2026-11-06).

## Facts (observed)

- Company: [Thunes](https://alderhq.app/companies/thunes)
- Location text: San Francisco, California, United States; San Francisco
- Where it can be done from (inferred): United States (evidence: "Location: San Francisco, California, United States; San Francisco")
- Posted: 2026-04-09 (211 days ago)
- First seen by alder: 2026-11-02 · last verified: 2026-11-04
- Reposted: 0 times · edited: 0 times
- Apply on the employer's site: https://www.thunes.com/jobs/7685432003?gh_jid=7685432003
- Skills listed (inferred): Python, Go, AWS, GCP, Kubernetes

## Pay and sponsorship

- Posted pay: not posted
- Market band for similar posted roles (SF Bay Area, n 137): p25 $175k, median $219k, p75 $269k

## Description (the employer's text)

### About Thunes

Thunes is the Smart Superhighway to move money around the world. Thunes’ proprietary Direct Global Network allows Members to make payments in real-time in over 140 countries and more than 90 currencies. Thunes’ Network connects directly to over 12 billion mobile wallets, stablecoin wallets and bank accounts worldwide, as well as 15 billion cards via more than 220 different payment methods, such as GCash, M-Pesa, Airtel, MTN, Orange, JazzCash, Easypaisa, AliPay, WeChat Pay and many more.

Thunes’ Direct Global Network differentiates itself through its worldwide reach, in-house SmartX Treasury System and Fortress Compliance Platform, ensuring Members of the Network receive unrivaled speed, control, visibility, protection, and cost efficiencies when making real-time payments, globally.

Members of Thunes’ Direct Global Network include gig economy giants like Uber and Deliveroo, super-apps like Grab and WeChat, MTOs, fintechs, PSPs and banks.

Headquartered in Singapore, Thunes has offices in 14 locations, including Barcelona, Beijing, Dubai, Hong Kong, Johannesburg, London, Manila, Nairobi, New York, Paris, Riyadh, San Francisco and Shanghai. For more information, visit: https://www.thunes.com/

### Context of the role

Thunes Financial Services is hiring a Security Engineer to be the architect of trust for our fintech platform. We are looking for a hybrid specialist who can bridge the gap between Infrastructure Security and Application Security, ensuring our systems are as resilient as they are compliant. This role will play a critical part in maintaining our regulatory compliance posture while building automated, scalable security guardrails. This role reports to the VP of Engineering.

As a Security Engineer, you will be responsible for security across the full lifecycle of our fintech platform. This hybrid specialist role requires deep engagement with both infrastructure and application security, focusing heavily on automation and regulatory compliance within a high-stakes, regulated environment.

### Day-to-day

- CI/CD Security Integration: Design, build, and maintain automation to integrate security testing (SAST/DAST/SCA) directly into our deployment pipelines. You'll ensure that security is a "paved road" for developers, not a bottleneck.
- Full-Stack Security: Own security across the lifecycle—from securing our cloud infrastructure (AWS/GCP) to performing code reviews and architectural risk assessments.
- Vulnerability Management: Manage our detection stack using modern vulnerability scanning and dependency management tools to identify, prioritize, and track risks across the environment.
- Security Automation: Build and maintain automated workflows for vulnerability reporting, triage, and remediation. We want someone who leverages AI-powered agentic coding tools or similar automation to eliminate manual toil and accelerate response times.
- Compliance Engineering: Monitor our technical security controls to ensure that they are operating effectively throughout the year to meet the rigorous cybersecurity compliance requirements to support regulatory exams as well as SOC-2 and PCI audits.
- Incident Response: Serve as a key member of our security response team, helping to investigate and mitigate potential threats.
### Collaborate with

- Product, data engineering, front-end engineering, tech ops, compliance, and legal
### Tech stack

Cloud (AWS/GCP, K8s), CI/CD tools (GitHub Actions, GitLab CI, or Jenkins), Python, Go, or Bash, SAST/DAST/SCA, enterprise vulnerability management platforms, automated dependency scanning solutions.

### Success in this role means

- Ensuring systems are resilient and compliant.
- Maintaining our regulatory compliance posture.
- Building automated, scalable security guardrails.
- Having a direct impact on the security strategy.
### Travel

- Some travel required for periodic team offsites.
### Knowledge Required

### Qualifications

A Bachelor's degree in Computer Science or a related field, but similar professional experience is equally valued.

### Experience

A proven track record of deep experience in both Infrastructure Security and Application Security is required.

---
Data: alder (https://alderhq.app). Cite https://alderhq.app/jobs/greenhouse%3Athunes%3A7685432003 and the date you read it. Observed facts come from the employer's own listing; location reach, level, family and skills are inferences.
