Security Engineer

About Pylon

America’s $13T mortgage market is one of the most important financial systems in the world. It underwrites the middle class and is the mechanism through which millions of families build wealth. But while every other financial instrument has been simplified to an API call, mortgages are still assembled by hand.

We started from zero and created the first vertically integrated mortgage platform that turns origination into a single API.

Publicly traded companies and the country’s largest originators are already building on Pylon. Revenue is compounding monthly. We’re backed by Peter Thiel, Conversion Capital, QED, Citi, Fifth Wall, and the founders of Ramp, Blend, and Mercury.

Working at Pylon isn’t for those seeking comfort. The people who thrive here have high agency, strong opinions, and a track record of delivering outcomes without direction. Many of us are former founders. We move quickly, challenge each other directly, and take full ownership of results. It’s hard work, but it will be worth it.

Join us in building America’s mortgage rails.

The Team

We're looking for a Security Engineer to join our Foundation team. This isn't a security role buried inside another team's priorities — this is the person who owns security at Pylon.

We handle extremely sensitive customer data. Social security numbers, financial records, employment history — the kind of information that demands zero tolerance for mistakes. We need someone who will be the directly responsible individual for drafting security best practices, implementing them, and ensuring the entire engineering organization follows through.

You'll work alongside our infra engineers to harden systems, define policies, and build a security culture that scales with the company.

Here Is What You'll Do

• Own security, end-to-end. You're not advising from the sidelines. You'll be the DRI for security posture across the company — from policy to implementation to enforcement.
• Lock down sensitive customer data. Mortgage data is some of the most sensitive information people share. You'll ensure it's encrypted, access-controlled, audited, and protected at every layer.
• Draft and enforce security best practices. You'll create the playbook for how Pylon handles data, credentials, access, and incident response — then make sure the team follows it.
• Partner with infra engineers. Security and infrastructure go hand in hand. You'll collaborate closely with the Foundation team to bake security into our systems rather than bolt it on after the fact.
• Build a security culture. Training, code reviews, threat modeling — you'll help every engineer at Pylon think about security as part of their daily work, not someone else's problem.

Tech Stack

• AWS (IAM, security tooling, network architecture)
• TypeScript
• SQL (PostgreSQL)
• GraphQL
• Temporal.io
• AI-driven development tooling and agentic infrastructure

Who Will Succeed Here

Someone who:

• Is deeply curious
• Wants to own features from design to development to deployment to maintenance
• Is willing to put the work in to solve the hardest of problems

Key skills/competency

• Security Engineering
• AWS Security
• Data Protection
• Policy Development
• Incident Response
• Security Culture Building
• Threat Modeling
• Access Control
• Encryption
• Infrastructure Security