Sardine

Design, build, and maintain backend services and APIs for fraud prevention, collaborating across teams to architect features and uphold engineering standards. | Requires 7+ years of web backend development and production service delivery; Golang and fintech or fraud-prevention experience are highly desirable. | Who we are: Sardine is the leading agentic risk platform for fighting financial crime. Our integrated solution unifies data across risk teams to help organizations stop fraud in real time, prevent AI-driven attacks, and automate fraud and AML operations. Sardine’s platform is strengthened by one of the fastest-growing fraud consortiums in the market, spanning more than 6 billion profiled devices, 800 million consumers, and 3 million businesses worldwide. Leading companies including FIS, GoDaddy, Intuit, Edward Jones, ZoomInfo, and Checkout.com rely on Sardine to secure and grow trust in their products. Our culture: We hire talented, self-motivated individuals with extreme ownership and high growth orientation. We value performance and not hours worked. We believe you shouldn't have to miss your family dinner, your kid's school play, friends get-together, or doctor's appointments for the sake of adhering to an arbitrary work schedule. We're a remote-first team spread across time zones, so no office to report to - work from wherever helps you do your best work. Just a couple of things to keep in mind: pay is based on where you're located, and you'll need to keep a home base in the country you're hired in. So while we love the "coffee shop today, mountains tomorrow" life, this isn't a passport-optional, work-from-anywhere-on-Earth kind of remote - think flexible within your country, not borderless. Location: Remote - United States About the Role: As a backend-focused Senior Software Engineer, you will play a pivotal role in designing, constructing, and maintaining APIs, services, and systems across our engineering team. This multifaceted position involves developing new features on a large scale, refining internal tooling and processes, contributing to product and technical roadmaps, and assuming diverse responsibilities within the organization. The ideal candidate for the backend role will have a proven track record in building highly available APIs, with additional proficiency in data pipelines and the relevant domain. What you'll be doing: Design, create, and maintain robust, efficient, and reliable backend services to meet our platform's evolving needs. Collaborate closely with business stakeholders to architect and implement new services from inception to delivery. Contribute to developing new features and capabilities that deliver substantial value to our customers. Work with various engineering and product teams to synchronize efforts and deliver cutting-edge solutions. Craft and maintain user-facing technical documentation, enhancing user understanding and facilitating seamless adoption of our services. Play a pivotal role in shaping our company's engineering culture, ensuring the maintenance of high engineering standards across the organization. What you’ll need: 7+ years of proven experience as a Software Engineer specializing in web backend development. Proficiency in Golang is a significant advantage. Additional experience in data engineering is highly desirable. A track record of successfully delivering high-quality production services and systems. Customer-centric approach with a strong emphasis on empathy towards users. Relevant industry experience, particularly in banking or fintech, and domain knowledge in fraud prevention or compliance. Proficient in English - from casual chats to formal reports. Technologies we use: TypeScript (React + node) Golang Ruby Bigtable Postgres / PostgreSQL GCP dataflow (apache beam) BigQuery Python Java Terraform Benefits we offer: Generous compensation in cash and equity Early exercise for all options, including pre-vested Work from anywhere: Remote-first Culture Flexible paid time off and Year-end break Health insurance, dental, and vision coverage for employees and dependents - US and Canada specific 4% matching in 401k / RRSP - US and Canada specific MacBook Pro delivered to your door One-time stipend to set up a home office — desk, chair, screen, etc. Monthly meal stipend Monthly social meet-up stipend Annual health and wellness stipend Annual Learning stipend Join a fast-growing company with world-class professionals from around the world. If you are seeking a meaningful career, you found the right place, and we would love to hear from you. To learn more about how we process your personal information and your rights in regards to your personal information as an applicant and Sardine employee, please visit our Applicant and Worker Privacy Notice.

Manage and automate vulnerability triage and remediation, investigate security issues, and establish secure platform defaults and patterns. | Requires engineering experience in vulnerability management and hands-on code auditing, plus sound security architecture judgment, cloud fundamentals, and the ability to coordinate remediation across teams. | Who we are: Sardine is the leading agentic risk platform for fighting financial crime. Our integrated solution unifies data across risk teams to help organizations stop fraud in real time, prevent AI-driven attacks, and automate fraud and AML operations. Sardine’s platform is strengthened by one of the fastest-growing fraud consortiums in the market, spanning more than 6 billion profiled devices, 800 million consumers, and 3 million businesses worldwide. Leading companies including FIS, GoDaddy, Intuit, Edward Jones, ZoomInfo, and Checkout.com rely on Sardine to secure and grow trust in their products. Our culture: We hire talented, self-motivated individuals with extreme ownership and high growth orientation. We value performance and not hours worked. We believe you shouldn't have to miss your family dinner, your kid's school play, friends get-together, or doctor's appointments for the sake of adhering to an arbitrary work schedule. We're a remote-first team spread across time zones, so no office to report to - work from wherever helps you do your best work. Just a couple of things to keep in mind: pay is based on where you're located, and you'll need to keep a home base in the country you're hired in. So while we love the "coffee shop today, mountains tomorrow" life, this isn't a passport-optional, work-from-anywhere-on-Earth kind of remote - think flexible within your country, not borderless. Location: Remote - United States The role Sardine makes risk and payment decisions for banks and fintechs. Our customers audit us closely, and application security is a large part of what they examine. Money moves through this platform, so real adversaries study it. Your job is to find what they would find, especially authorization flaws and business logic abuse, and then make the whole class of bug go away. The application security team is small. The estate is large: Go, Node.js, Python, Ruby, and Java services running on multi-cloud and Kubernetes. That ratio shapes the work. Findings arrive from scanners, code review, testing, threat modeling, pentesters, and bug bounty hunters. You turn that stream into a pipeline that validates, routes, and closes issues with as little manual effort as possible. Then you use what the pipeline tells you to remove root causes: secure defaults, patterns engineers reach for first, and fixes that hold. Little here is pre-decided. You determine where the risk is and go after it. The work Where most of your time goes Running and automating the vulnerability pipeline Triage, validate, route, and drive remediation of findings from every source: SAST, DAST, SCA, code review, pentests, and bug bounty Build the automation that removes manual effort from each of those steps External pentests and bug bounty program: set scope, direct the testers, judge severity, and close the loop Making bug classes go away Spot the patterns across findings and remove the root cause, not just the instance Set the secure patterns and defaults that make the right way the easy way Write custom static analysis rules for our own anti-patterns, so a fixed bug class stays fixed Review platform-layer controls (authorization, service identity, secrets handling, gateway enforcement), find the gaps, and push the owning teams until they are closed Work alongside engineers on fixes that are simple, get adopted, and hold Also part of the job Hands-on testing of our applications and APIs, and manual code review of high-exposure services, with depth in authorization and business logic Threat modeling on new and high-exposure designs Security enablement across engineering, including a security champions program What we're looking for Vulnerability management, automated. Experience running vulnerability management end to end, and automating it with code against scanner, ticketing, and source-control APIs An engineering background. You have shipped and maintained real software. You read unfamiliar code quickly, review it rigorously, and reason about architecture and failure modes. Ownership to done. You take problems all the way through, including fixes that depend on other teams. You follow up on the fix you recommended three sprints ago. Judgment over tenure. We care more about the depth of your judgment than your years of experience. Code auditing in at least one of Go, Python, Node.js, Ruby, or Java, and the willingness to work in the rest Practical command of the OWASP Top 10, with real depth in broken access control and business logic flaws SAST, DAST, and SCA in CI/CD, tuned so engineers trust the output. Cloud fundamentals on GCP or AWS. Docker and Kubernetes. You separate real findings from theoretical ones. You disagree in the open, with evidence, and update when someone brings better evidence. Your influence travels asynchronously, across time zones, to people with strong opinions and no reporting line to you. Bonus Scaling security tooling across many repositories, languages, and build systems Prior experience writing custom static analysis rules (Semgrep, CodeQL, or similar) Fintech, payments, or other environments under serious third-party security review (PCI DSS, SOC 2, customer audits) Fully distributed, asynchronous engineering experience Offensive experience in whatever form you found it. Pentesting on web, API, mobile, or cloud is the most directly relevant. Hardware and embedded work, physical security and lock sport, red team engagements, protocol and radio work, and CTF or bug bounty results all count. Advanced offensive certifications. OSWE and BSCP are the most relevant; CPTS, CRTO, and similar also count. Public work: research, tooling, disclosures, talks Benefits we offer: Generous compensation in cash and equity Early exercise for all options, including pre-vested Work from anywhere: Remote-first Culture Flexible paid time off and Year-end break Health insurance, dental, and vision coverage for employees and dependents - US and Canada specific 4% matching in 401k / RRSP - US and Canada specific MacBook Pro delivered to your door One-time stipend to set up a home office — desk, chair, screen, etc. Monthly meal stipend Monthly social meet-up stipend Annual health and wellness stipend Annual Learning stipend Join a fast-growing company with world-class professionals from around the world. If you are seeking a meaningful career, you found the right place, and we would love to hear from you. To learn more about how we process your personal information and your rights in regards to your personal information as an applicant and Sardine employee, please visit our Applicant and Worker Privacy Notice.

Manage full vendor lifecycle and establish procurement processes across departments. | 5+ years procurement or vendor management experience with strong negotiation and process-building skills. | Who we are: Sardine is the leading agentic risk platform for fighting financial crime. Our integrated solution unifies data across risk teams to help organizations stop fraud in real time, prevent AI-driven attacks, and automate fraud and AML operations. Sardine’s platform is strengthened by one of the fastest-growing fraud consortiums in the market, spanning more than 6 billion profiled devices, 800 million consumers, and 3 million businesses worldwide. Leading companies including FIS, GoDaddy, Intuit, Edward Jones, ZoomInfo, and Checkout.com rely on Sardine to secure and grow trust in their products. Our culture: We have hubs in the Bay Area, NYC, Austin, Toronto, and São Paulo. However, we maintain a remote-first work culture. #WorkFromAnywhere We hire talented, self-motivated individuals with extreme ownership and high growth orientation. We value performance and not hours worked. We believe you shouldn't have to miss your family dinner, your kid's school play, friends get-together, or doctor's appointments for the sake of adhering to an arbitrary work schedule. Location: Remote - US/Canada From Home / Beach / Mountain / Cafe / Anywhere! We are a remote-first company with a globally distributed team. You can find your productive zone and work from there. About the Role We’re looking for a Procurement Manager to be our first in-house buyer, supporting purchasing across every team including software and IT, marketing and events, travel and employee onboarding, professional services, and more. You’ll be the point of contact for moving sourcing forward and getting deals over the line: managing vendor relationships, owning negotiations, tracking renewals, guiding stakeholders through purchasing decisions, and making sure we buy the right tools and services at the right price. You’ll work closely with finance, IT, legal, and business leaders in a fast-paced environment where strong judgment and relationship management are essential. You will own the full vendor lifecycle and balance business needs, commercial terms, vendor risk, and long-term partnership health. Who you are: Deeply experienced in procurement, vendor management, and commercial negotiation in a fast-moving environment. A strong negotiator who creates leverage and holds firm on price and terms (payment terms, ramp, and renewal protection) while making practical trade-offs that benefit the company. A relationship developer who helps build long-term partners out of our vendors An effective communicator who guides stakeholders through sourcing decisions, aligns them on options and strategy, and keeps purchasing disciplined without slowing teams down. Comfortable buying across many categories and departments — software, marketing and events, travel, professional services — and juggling a broad vendor portfolio at once. Focused on driving savings and better terms by cutting waste, not just price: consolidating redundant tools and reclaiming unused licenses, and rigorously comparing options in the market. Organized and accurate. Tracks contract details, owns renewals, and follows-through. Treat vendor risk as part of the deal, coordinating security, data-privacy (DPA), and liability review with Security and Legal. A builder — comfortable creating a process where none exists and willing to do the hands-on work as our first procurement hire. What you'll need: 5+ years in procurement, strategic sourcing, vendor management, or commercial negotiations, ideally in-house at a high-growth technology or software company. Proven track record independently owning vendor negotiations, contract management, and renewal tracking across multiple functions and spend categories (e.g., software/SaaS, marketing and events, travel, professional services). Experience evaluating vendors competitively and negotiating favorable pricing and terms. Comfort influencing stakeholders, pushing back when needed, and partnering cross-functionally to keep purchasing disciplined. Track record of building the procurement process from the ground up — intake/PO workflows, contract and renewal tracking, spend visibility and choosing lightweight tooling (e.g., a spend-management or CLM platform) in partnership with Finance and Legal. Experience coordinating vendor security and data privacy reviews (SOC 2, DPAs) and reviewing core contract risk terms (indemnification, liability caps, insurance) with Legal/Security. Excellent executive-level written communication, presentation, and relationship-management skills. Benefits we offer: Generous compensation in cash and equity Early exercise for all options, including pre-vested Work from anywhere: Remote-first Culture Flexible paid time off and Year-end break Health insurance, dental, and vision coverage for employees and dependents - US and Canada specific 4% matching in 401k / RRSP - US and Canada specific MacBook Pro delivered to your door One-time stipend to set up a home office — desk, chair, screen, etc. Monthly meal stipend Monthly social meet-up stipend Annual health and wellness stipend Annual Learning stipend Join a fast-growing company with world-class professionals from around the world. If you are seeking a meaningful career, you found the right place, and we would love to hear from you. To learn more about how we process your personal information and your rights in regards to your personal information as an applicant and Sardine employee, please visit our Applicant and Worker Privacy Notice.