[Hiring] Staff Security Engineer @Trolley

Role Description

Trolley is looking for a Staff Security Engineer to help us stay ahead of attackers using AI to compromise security. This is a hands-on role focused on:

• Finding and closing security gaps in our product and infrastructure.
• Working with engineering teams on threat modelling, design reviews, and fixes.
• Building security controls in our AWS platform and shared tooling.
• Incident response and compliance support.
• Shaping security engineering practices at Trolley.

Qualifications

• 8+ years in security or software engineering, with at least 5 years hands-on in security.
• Experience building and running security controls in production environments.
• Ability to read and debug production application code.
• Experience running threat modelling and design reviews.
• Experience leading technical responses to security incidents.
• Ability to turn compliance requirements into automated controls.
• Understanding of AI's role in security attacks.
• Experience working autonomously and making decisions through written proposals.

Requirements

• Hands-on experience with SOC 2, ISO 27001, PCI DSS, or similar controls.
• Experience defending against account takeover, bots, or fraud at scale.
• Experience designing authentication and access controls.
• Experience running tabletop, purple-team, or red-team exercises.
• Familiarity with compliance automation platforms.
• Experience securing agentic systems or AI coding pipelines.

Benefits

• Competitive salary.
• ESOP Program: Meaningful equity and ownership.
• Extended healthcare benefits from Day 1.
• 4 weeks paid vacation per year + public holidays (+ 1 extra vacation day per year of service).
• 30 days remote work from anywhere.
• Gym membership allowance.
• 1/2 day Fridays off during summer.
• Company-provided use of Apple MacBook and Mac gear.

Company Description

Trolley is the payouts platform for the internet economy, enabling businesses to pay people globally. We support creators, on-demand workers, and suppliers at scale, and are trusted by companies like Canva, SoundCloud, and Envato. Our mission is to unlock the global economic opportunity of the internet through a borderless payouts ecosystem.