Senior Software Security Engineer, Platform - Remote Eligible

Senior Software Security Engineer, Platform

Branch is on a mission to empower workers with financial freedom. We do this by helping companies accelerate payments and providing working Americans with accessible, free financial services. We're committed to building and delivering more inclusive, transparent, and frictionless financial products.

Our goal of empowerment extends to our own employees, too. Have a great idea? Share it today and it might just get implemented tomorrow. As a member of our team, your voice and creativity matter—and they can directly impact our products, company, and culture.

We not only focus on attracting great talent from across the country, but also on building teams that help that talent thrive. That means valuing a diversity of opinions and working styles, while creating a shared belief in innovation, initiative, and winning together.

Come join our team as we develop new ways to improve the lives of working Americans.

About the Role

As a Senior Security Software Engineer at Branch, you'll play a critical role in securing our platform by designing and implementing security-focused systems, tools, and patterns directly in code. This is a hands-on engineering role focused on security through software, not operations.

You'll work closely with our Operations, Security, and Risk teams while partnering across engineering to identify risks, implement mitigations, and promote secure development practices. This is a cross-functional, high-impact role that helps ensure our systems scale safely and securely.

Responsibilities Include, But Are Not Limited To:

• Design and implement secure architecture patterns, libraries, and tools across our Java and Go services
• Identify and mitigate security risks through design reviews, code reviews, and threat modeling
• Integrate security automation into CI/CD workflows (e.g., static analysis, secrets scanning, dependency checks)
• Improve authentication, authorization, and service-to-service communication standards
• Promote secure coding practices across teams through collaboration and guidance
• Support compliance and incident response from a technical engineering perspective

Qualifications:

• 5+ years of software engineering experience, with 3+ years focused on security-related initiatives
• 2+ years working with Keycloak
• Strong programming skills in Java; working experience or willingness to learn Go
• Deep understanding of application and service security, including the OWASP Top 10 and secure service design
• Familiarity with OAuth 2.0, OpenID Connect, and SAML-based authentication
• Experience building secure RESTful APIs and working with Spring Security
• Solid grasp of GCP services and cloud security best practices
• Experience integrating security into CI/CD pipelines
• Strong communication skills and ability to collaborate across engineering, operations, and risk teams
• BS in Computer Science or equivalent experience

Compensation:

The salary range for this role is $160-170k.

The salary range displayed reflects an average base salary range for the position across all the U.S. The base salary offered to an applicant could be higher or lower based on each applicant's specific skill set, depth of experience, relevant education or training, etc.

Location:

This position is classified as REMOTE within the United States of America.

We are unable to hire candidates located outside of the domestic U.S.

Benefits:

• Market-leading medical, dental, and vision insurance
• Stock options
• Free Premium-Tier Origin Financial Wellness subscription
• Monthly home-office stipend
• 401k (TransAmerica)
• 12-weeks paid parental leave for birthing and non-birthing parents
• Flexible time off + sick and safe time
• 11 paid company holidays

Branch is an equal opportunity employer and we value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.

Must be currently authorized to work in the USA without sponsorship or transfer.