Staff Security Engineer

About Us
Rho is the modern banking platform built for the AI era. Startups and growth-stage companies can open accounts in minutes, issue cards, manage expenses, pay bills, and close the books – all in one connected platform backed by real human support.
About the Role
We're looking for a Staff Security Engineer or Security Lead to lead our security work as Rho continues to grow.
This is a hands-on technical leadership role. You'll own application security, infrastructure security, vulnerability management and threat detection & response. You'll be working very closely with Engineering, IT and company leadership to identify the risks, build the technical solutions and define our approach to security.
We're looking for someone who can set direction, build the team, and decide where to invest in security while staying directly involved in the technical work.

Responsibilities
• Lead our security engineering efforts across app security, infrastructure security, vulnerability management and incident response.

• Design and build security tools, controls and automation to protect our products, systems and customer data.

• Work with product and engineering teams to identify risks, review system designs, and help the engineers build securely.

• Own the security roadmap, our risk management approach and our technical priorities.

• Improve threat detection and incident response (including on-call, escalation and hands-on incident investigation).

• Oversee vulnerability management, security assessments and external vulnerability disclosure and remediation.

• Assess the security technologies and external partners and decide whether to build, buy or invest.

• Work with IT, compliance and the various other teams to define clear security responsibilities and meet the regulatory and business requirements.

• Communicate the security risks and the security priorities to the board.

• Mentor and develop our security engineers to help grow the team as our requirements evolve.

Qualifications
• Significant hands-on security engineering experience, including ownership of fairly complex technical initiatives.

• Strong software engineering background, with a track record of building tools, writing code and automating security processes.

• Deep expertise in one or more of the areas of application security, cloud/infrastructure security or detection and incident response.

• Experience leading security initiatives and improving security practice across engineering teams.

• Solid understanding of security risks, vulnerabilities and incident response in a production environment.

• Ability to make sound technical decisions, prioritize competing risks, and balance security with engineering velocity.

• Experience mentoring engineers and providing technical leadership.

• Strong communication skills and the ability to work effectively with engineering teams and company leadership.

Nice to Have
• Experience in fintech, financial services, or another regulated industry.

• Familiarity with SOC 2, ISO 27001, PCI DSS, or similar frameworks.

• Experience building or scaling a security function at a growing technology company.