Security Engineer
The Better Money Company (TBMC) is building a stablecoin clearinghouse that connects stablecoin issuers to fintechs, banks, neobanks, and other businesses building with stablecoins. It brings fungibility to stablecoins, enabling redemption-based swaps at par ($1 in = $1 out) with fixed pricing and guaranteed settlement times. TBMC serves payment companies, fintechs, neobanks, and stablecoin issuers who need reliable, compliant infrastructure for stablecoin movement and settlement.
Funding
About The Better Money Company
The Better Money Company operates a stablecoin clearinghouse designed to solve the coordination problem of a fragmented, many-to-many stablecoin market by transforming it into a unified network, similar to how ACH functions as a bank clearinghouse. Unlike existing trade-based infrastructure where stablecoins are swapped at market prices with slippage and unpredictable settlement, TBMC's clearinghouse offers redemption-based swaps at par, fixed fees, guaranteed settlement times, and a compliant source of funds sourced from GENIUS-compliant issuer capital or KYB'd clearinghouse clients. For stablecoin issuers, TBMC offers 1:1 fungibility for any stablecoin (including custom ones), settlement in a preferred stablecoin, the ability to send to and from many wallets/assets, and integration with a broad ecosystem of partners through a single endpoint. The company's initial supported stablecoins include USDC, USDG, PYUSD, SBC, CASH, mUSD, frxUSD, and RLUSD, initially on Ethereum and Solana with plans to expand chain coverage. TBMC partners with companies such as Ramp, Modern Treasury, Agora, Turnkey, Brale, LayerZero Labs, Privy, Paxos, Notabene, MoonPay, M0, BitGo, Bastion, alfred, Utila, and Frax, targeting fintechs, neobanks, payment companies, and other businesses building stablecoin payment products.
Skills
About the Role
You'll lead how the company thinks about code and operational security as it scales. You'll help design the systems, practices, and safeguards that enable growth without compromising trust. You'll own the security posture across application, infrastructure, and operational security, conduct code reviews, threat modeling, and penetration testing, and design security controls and incident response processes appropriate for a regulated payments environment. You'll also build internal security tooling, hire and manage specialist contractors or future security hires, and work closely with engineering to embed security into the development lifecycle from the start.
Requirements
- 5+ years of experience in security engineering, with meaningful time at a payments company, bank, or other regulated financial institution
- Experience with cloud environments (GCP) and infrastructure as code providers (Terraform)
- Breadth across both application/code security and operational security
- Ability to write production code, not just review it
- Experience building security programs at early-stage or high-growth companies, ideally from scratch
- Familiarity with compliance frameworks relevant to payments and banking (SOC 2, PCI-DSS, state money transmission, etc.)
- Based in New York City (or willing to relocate)
Responsibilities
- Own security posture across application security, infrastructure security, and operational security
- Conduct code reviews, threat modeling, and penetration testing to identify and remediate vulnerabilities
- Design and implement security controls, monitoring, and incident response processes appropriate for a regulated payments environment
- Establish security policies, procedures, and compliance frameworks (SOC 2, PCI-DSS, etc.) as the company scales
- Hire, manage, and supervise specialist contractors or future security hires as the team grows
- Ship internal security tooling and features
- Work closely with engineering to embed security into the development lifecycle from the start
Benefits
- Equity compensation
- Comprehensive insurance (medical/dental/vision)
- Unlimited vacation
- Periodic off-sites