ABOUT OUR COMPANY:

The crushing weight of debt is something that we believe holds people back from reaching their dreams and making a splash in the world. So in 2013, after seeing our friends and family struggle with student loans, we created Splash Financial.
Over the years, our mission has expanded to include helping people with other forms of debt - such as refinancing credit cards, which are at all time highs in the US. And we’ve been able to refinance $6+ Billion in loans through our network of Splash, powered credit union and bank partners who leverage our marketplace and automated loan processing technology. And we’ve raised over $70 million from investors like partners of DST Global, Citi Ventures, TruStage Ventures, Northwestern Mutual Future Ventures, Detroit Venture Partners, and more.
But at our core, we’re still that little company from Cleveland with a big dream: to make people more powerful than their debt and we’re just getting started..

ABOUT THE ROLE:

Splash Financial is seeking a Senior Security Engineer to support and strengthen our cybersecurity posture. This individual will play a hands-on role in implementing and operating key security technologies and processes, collaborating across teams to ensure secure development practices, regulatory compliance, and effective risk management. If you thrive in a fast-paced environment and are excited to contribute to building and scaling security solutions, this role is for you.

WHAT YOU’LL DO AT SPLASH:

• Contribute to the development and implementation of data loss prevention (DLP) strategies and tooling to reduce risk of data exfiltration.
• Operate and enhance our SIEM platform, tuning alerts and contributing to incident response workflows and playbooks.
• Partner with engineering, IT, and product teams to identify and remediate vulnerabilities through regular scanning and patch management.
• Participate in security risk assessments and help track remediation efforts across teams.
• Support compliance initiatives by assisting in the implementation and maintenance of security controls aligned with frameworks like SOC2, PCI, or ISO 27001.
• Assist in the refinement and execution of our security incident response process.
• Develop and maintain security documentation including procedures, runbooks, and training materials.
• Support periodic cybersecurity maturity assessments and contribute to improving security posture based on findings.
• Create and maintain dashboards and reporting mechanisms to track security metrics and control health.
• Help deliver security training and awareness campaigns, including secure data handling and phishing simulation programs.