At Sunbit, we're building financial technology that puts people first. By combining intelligent decisioning with a personalized, transparent approach, we help consumers access the payment options that are right for them while empowering merchants to build stronger customer relationships.
Engineering is at the heart of how we make that happen. We build scalable distributed systems, cloud-native services, intelligent data platforms, and AI-powered solutions that enable real-time financial decisions at scale. By leveraging modern engineering practices and integrating AI into both our products and development workflows, we solve complex technical challenges, accelerate innovation, and continuously improve the way we build software. Every service, model, and architectural decision we make directly impacts our products, our customers, and the future of financial technology.
We are looking for an Application Security Engineer to join our Security Engineering team.
You will take ownership of strengthening security across Sunbit’s products, services, and development lifecycle. This includes identifying and addressing security gaps in application architecture and code, APIs and service-to-service communication, authentication and authorization flows, open source dependencies and third-party libraries, CI/CD pipelines and build systems, secrets handling, and AI-powered product features.
As a Security Engineer at Sunbit, you will dig into how our systems actually work, understand where the real risk is, and decide what needs to be built to close it. Some problems are solved by changing an architecture or a design pattern, others by implementing a new control, embedding a security gate into the pipeline, integrating and tailoring a security platform, or writing something from scratch. You will own that decision and the implementation that follows.
The Security Engineering team works as a group of all-rounders. Alongside your core focus, you will contribute to cloud and infrastructure security, corporate IT security, detection engineering, incident response, and our growing AI security work, both securing AI workloads and using AI to make our own security capabilities better.
What You Will Work On
• Identify security gaps across Sunbit’s applications, services, and development lifecycle, then translate them into practical technical solutions.
• Design and implement scalable security controls that address root causes and fit our architecture and engineering practices.
• Review architectures and designs, run threat modeling, and guide R&D teams toward secure patterns before code is written.
• Secure APIs, authentication and authorization flows, service-to-service trust, data handling, and multi-tenant boundaries.
• Own the secure development lifecycle end to end, including security gates in GitHub Actions, SAST, SCA, secrets scanning, and dependency and supply chain risk.
• Build reusable security capabilities, libraries, paved-road patterns, and developer-facing tooling that make the secure path the default path.
• Build custom AI agents and AI-powered capabilities that improve our security tools, workflows, visibility, and control.
• Understand and secure AI-powered product features, including their data access, identities, permissions, integrations, and runtime behavior.
• Partner with R&D, DevOps, Infrastructure, Data, AI, and IT teams from initial analysis through implementation, adoption, and validation.