Security Engineer

We're looking for a strong Security Engineer to join Alinea. If your aspirations are to become a Head of Security one day, we'd like to help you get there. If you'd rather be heads-down securing and optimizing our infrastructure for the foreseeable future, great. But either way, the latter will be your focus in the near term.

Alinea is an investing app for Gen Z. We’re a Y Combinator-backed startup and have raised over $5.5M for our seed round from top investors including Goodwater Capital, F7 Ventures, GFR, and Worklife Ventures. Alinea is looking for a talented security expert to work directly with the founding team in building, auditing, and securing our authentication, identity verification, and infrastructure. We are looking for an ambitious, fast-moving, and detail-oriented individual who will help us protect user data, ensure compliance, and build the most secure investing experience for the next generation.

This may not be the right role for you if you are uncomfortable with any of the following:

1. Taking ownership of security measures and compliance requirements.
2. Working across multiple domains, from authentication to infrastructure security.
3. A role that will push you to learn new security techniques constantly.

Role Overview:
As a Security Engineer at Alinea, you will play a critical role in securing our platform, protecting user data, and ensuring compliance. You’ll work closely with engineers, product managers, and leadership to implement security best practices and proactively identify vulnerabilities.

Responsibilities:

• Responsible for authentication, phone number changes, passwords, passkeys, and email verification.
• Audit and secure our full API stack to prevent vulnerabilities.
• Handle compliance, identity verification, and fraud prevention endpoints.
• Conduct penetration tests to identify and mitigate security risks.
• Audit and upgrade our AWS deployments for security best practices.
• Set up rate limiting to protect against abuse and attacks.
• Configure and install firewalls and intrusion detection systems.
• Work with the engineering team to implement security controls across all layers of our stack.
• Stay up to date with industry security standards and emerging threats.

Qualifications:

• 3+ years of experience in security engineering or a related role.
• Strong knowledge of authentication protocols (OAuth, SAML, JWT) and security best practices.
• Experience auditing and securing APIs and cloud-based infrastructure (AWS, GCP, or Azure).
• Familiarity with penetration testing tools and methodologies.
• Understanding of compliance standards such as SOC 2, GDPR, or ISO 27001.
• Proficiency in configuring firewalls, IDS/IPS, and security monitoring systems.
• Strong problem-solving skills and ability to work in a fast-paced startup environment.
• Excellent communication and collaboration skills.

Why Join Us?

• Opportunity to work at a high-impact startup with a fast-paced and dynamic culture.
• Work alongside a talented and passionate team.
• Competitive salary and equity options.
• Flexible work environment and growth opportunities.