Jobs
>
Portland

    Senior Full-Stack Engineer - Portland, United States - Mercury

    Default job background
    Description

    There's a guideline in medicine called "Sutton's Law": first consider the obvious. The law gets its name from an apocryphal interview with Willie Sutton, an infamous bank robber, who was asked "Why do you rob banks?" and replied simply "Because that's where the money is."

    Mercury is building the banking* stack for startups, and it's obvious security is critical to our product. That's where the money is.

    At Mercury, there are two dedicated security teams. The first is a comprehensive Information Security (InfoSec) team with extensive backgrounds in security. They focus on areas such as PCI/SOC2 compliance, endpoint management, detection and response, as well as network and corporate security. This team has a wide mandate and frequently work in our product and infrastructure as well.

    The team you would be joining is primarily focused on engineering, with a primary goal of addressing security challenges through code. Our work involves tackling a variety of security issues, ranging from developing security features to creating infrastructure that assists other teams in building their features securely. Currently, our main projects include enhancing our admins' permissions system, devising a streamlined method for users to verify their identity during phone calls, and a few smaller initiatives. In addition to coding, we actively engage with other teams. This involves explaining vulnerabilities identified through our bug bounty programs, addressing security concerns related to ongoing projects, and responding to queries from other teams. Exceptional security judgment, a grasp of product concepts, and effective communication skills are highly valuable in these collaborative scenarios.

    As a Security Engineer at Mercury, you will:

    • Address key security features within the product, such as developing passkey support, enhancing the security dashboard, refining user-facing audit logs, and implementing SAML.
    • Upgrade our pentest environment to ensure it aligns with our security researchers' needs, addressing challenges like data sufficiency and effective stubbing of third-party interactions.
    • Contribute to bug bounty program triage by validating reports, coordinating responses, and managing researcher payments, while collaborating with teams to resolve identified issues.
    • Analyze vulnerabilities and proactively target root causes by creating tools for codebase scanning, establishing effective patterns and systems, and enhancing security training for engineers.
    • Assist teams in threat modeling and cultivating a security mindset for their features, leveraging dedicated security expertise to complement the existing skills of our engineers.
    • Investigate user security issues, utilizing product knowledge and logs to understand incidents and proposing improvements to monitoring for quicker detection of similar issues.
    The ideal candidate possesses:
    • Excellent empathy for customers.
    • An ability to carefully consider tradeoffs between security and user experience.
    • Proficiency in standard software engineering, including discussions on schema and app design.
    Requirements:
    • Three or more years of experience in software security roles or equivalent.
    • Full-stack development experience, with excitement to learn and work with Haskell, React, and TypeScript.
    Nice to Haves:
    • Familiarity with our tech stack.
    • Experience in fraud or finance-related domains.
    The total rewards package at Mercury includes base salary, equity (stock options), and benefits.

    Our salary and equity ranges are highly competitive within the SaaS and fintech industry and are updated regularly using the most reliable compensation survey data for our industry. New hire offers are made based on a candidate's experience, expertise, geographic location, and internal pay equity relative to peers.

    Our target new hire base salary ranges for this role are the following:
    • US employees (any location): $203,100-$238,900.
    • Canadian employees (any location): CAD 184,800-217,400.
    *Mercury is a financial technology company, not a bank. Banking services provided by Choice Financial Group and Evolve Bank & Trust; Members FDIC.

    #LI-ES1

    We use Covey as part of our hiring and / or promotional process for jobs in NYC and certain features may qualify it as an AEDT. As part of the evaluation process we provide Covey with job requirements and candidate submitted applications. We began using Covey Scout for Inbound on January 22, 2024.

    Please see the independent bias audit report covering our use of Covey here.

  • 24 Seven Talent

    Full-Stack Engineer

    1 week ago


    24 Seven Talent Portland, United States

    Job title: Full-Stack Engineer · Contract type: · Location: Portland · Discipline: · Remote: No · Reference: · Contact name: Adrienne Salzwedel-Bass · Job description 24 Seven is teaming up with a well-known company based in Portland, OR to help them find a Full-Stack Engi ...

  • Remotely

    Full-Stack Engineer

    1 week ago


    Remotely Portland, United States

    This is a remote position. · Full-Stack Engineer (1 year experience, remote) · Be part of our future This job posting builds our talent pool for potential future openings. We'll compare your skills and experience against both current and future needs. If there's a match, we'll ...

  • MercuryTechnologies

    Full-Stack Engineer

    1 week ago


    MercuryTechnologies Portland, United States

    Mercury is building the banking* stack for startups. We launched about four years ago with basic functionality, and now we're refining our product and building out new features. · Thankfully, our customers seem to like what we've built so far: · As a part of the Growth team, yo ...

  • MercuryTechnologies

    Full-Stack Engineer

    1 week ago


    MercuryTechnologies Portland, United States

    Mercury is building the banking* stack for startups. We launched about four years ago with basic functionality, and now we're refining our product and building out new features. · Thankfully, our customers seem to like what we've built so far: · As a part of the Growth team, you' ...


  • Mercury Portland, United States

    There's a guideline in medicine called "Sutton's Law": first consider the obvious. The law gets its name from an apocryphal interview with Willie Sutton, an infamous bank robber, who was asked "Why do you rob banks?" and replied simply "Because that's where the money is." · Merc ...


  • GXO Logistics Portland, United States

    Logistics at full potential. · At GXO, we're constantly looking for talented individuals at all levelswho can deliver the caliber of service our company requires. You know that a positive work environment creates happy employees, which boosts productivity and dedication. On our ...


  • GXO Logistics, Inc. Portland, United States

    Logistics at full potential. · At GXO, we're constantly looking for talented individuals at all levels who can deliver the caliber of service our company requires. You know that a positive work environment creates happy employees, which boosts productivity and dedication. On our ...


  • GXO Logistics Portland, United States

    Logistics at full potential. · At GXO, we're constantly looking for talented individuals at all levelswho can deliver the caliber of service our company requires. You know that a positive work environment creates happy employees, which boosts productivity and dedication. On our ...


  • GXO Logistics Portland, United States

    Logistics at full potential. · At GXO, we're constantly looking for talented individuals at all levelswho can deliver the caliber of service our company requires. You know that a positive work environment creates happy employees, which boosts productivity and dedication. On our t ...


  • MercuryTechnologies Portland, United States

    There's a guideline in medicine called "Sutton's Law": first consider the obvious. The law gets its name from an apocryphal interview with Willie Sutton, an infamous bank robber, who was asked "Why do you rob banks?" and replied simply "Because that's where the money is." · Mercu ...


  • Mercury Portland, United States

    Mercury is building the banking stack for startups*. We launched about four years ago with basic functionality, and now we're refining our product and building out new features. · Thankfully, our customers seem to like what we've built so far: · Technically, we're working on th ...


  • eBay Portland, United States

    At eBay, we're more than a global ecommerce leader were changing the way the world shops and sells. Our platform empowers millions of buyers and sellers in more than 190 markets around the world. Were committed to pushing boundaries and leaving our mark as we reinvent the future ...


  • eBay Portland, United States

    At eBay, we're more than a global ecommerce leader - we're changing the way the world shops and sells. Our platform empowers millions of buyers and sellers in more than 190 markets around the world. We're committed to pushing boundaries and leaving our mark as we reinvent the fut ...


  • Columbia Sportswear Portland, United States

    OUTGROWN YOUR OWN BACKYARD? COME PLAY IN OURS · At Columbia, we're as passionate about the outdoors as you are. And while our gear is available worldwide, we're proud to be based in the Pacific Northwest, where natural wonders are our playground. · Every product we make and eve ...


  • The Dyrt Portland, United States Full time

    The Dyrt is the largest digital camping platform in the world, and the number 1 ranked camping app on both iOS and Android. Every second, a new user visits The Dyrt to access our community-driven campground information. With more than 1 million user-submitted campgrounds, reviews ...


  • GXO Logistics Portland, United States Full time

    Logistics at full potential. · At GXO, we're constantly looking for talented individuals at all levels who can deliver the caliber of service our company requires. You know that a positive work environment creates happy employees, which boosts productivity and dedication. On our ...


  • The Dyrt Portland, United States

    The Dyrt is the largest digital camping platform in the world, and the number 1 ranked camping app on both iOS and Android. Every second, a new user visits The Dyrt to access our community-driven campground information. With more than 1 million user-submitted campgrounds, reviews ...


  • Autodesk Portland, United States

    Job Requisition ID # · 23WD73264 · Position Overview · Are you passionate about building high-quality software? Do you find yourself wondering how things work and how you can make them better? Do you want to make an impact? Autodesk's education platform engages millions of stu ...


  • Scion Staffing Portland, United States

    Scion Staffing has been engaged to conduct an immediate search for an experienced Full Stack Developer for our client, a a full-service experiential marketing agencyin Portland, OR · As a Full Stack Developer, you will be responsible for the full lifecycle of software developmen ...


  • Redolent Infotech Pvt. Ltd. Portland, United States

    We are urgently looking to fill following position for our Direct client · TITLE:Front-End Full Stack Engineer · LOCATION: Portland, OR · DURATION: 6+ months · Rate: DOE · Job Description: · Description · clientis the idea incubator inside the world's largest global retaile ...