Fractional Application Security Lead (Financial Services / Fintech / Banking / Remittance)

Job Description

Company: Upwork

We’re looking for an experienced Fractional Application Security Lead to oversee the security of our platform. This is an ongoing, part-time role requiring approximately 10–20 hours per week and reports directly to the CEO.

Responsibilities:

– Review every pull request before production

– Review system architecture

– Perform threat modeling for every new feature

– Audit authentication and authorization

– Review wallet and payment flows

– Ensure secrets are stored correctly

– Review AWS/cloud infrastructure

– Review Firebase/Supabase (if used)

– Review APIs

– Review database permissions

– Verify encryption

– Ensure compliance with fintech best practices

If you’re interested, please include a brief summary of your relevant experience, examples of similar work, your availability, and your hourly rate.

Screening Questions:

1. Please describe your experience securing fintech, financial services, banking, or payment platforms.

2. Describe your experience reviewing pull requests, system architecture, and cloud infrastructure from a security perspective.

3. Tell us about a significant security vulnerability you identified before it reached production. What was the issue, and how did you address it?

4. What experience do you have with authentication and authorization, API security, encryption, secrets management, and database permissions?

5. Why are you a good fit for this role, and what relevant experience would you bring to our team?

Source: Upwork