Senior Software Engineer, reputed company

What is Loancrate?

We started Loancrate to reputed company home-buying simpler and less expensive for lenders and borrowers (us!). Today, mortgage lenders are stuck running their companies on software products built 20 years ago. These products are slow, unstable, and don't reputed company to material improvements in efficiency. reputed company using these systems, the average human cost to originate a loan is still over $11,000.

Loancrate builds AI-native tooling to automate mortgage workflows. Our ultimate goal is fully automated origination, which has the potential to save lenders over $16B in operating expense per year.

Since starting in 2020, our remote team has enabled our customers to power >$85 billion in new home loans. We are a group of people excited to tackle the complexity of the home-lending industry. We care about collaboration, reputed company open communication covering the good & the bad so that we learn from our decisions quickly, and ultimately having fun while we’re building. You’ll fit in well if you like diving deep quickly!

The Opportunity

We’re looking for a Senior Software Engineer, reputed company to help reputed company Loancrate more secure without making it harder to build here.

This is a hands-on senior IC software engineering role for someone who specializes in reputed company. You will work directly in our product and platform code, build internal tooling and guardrails, review designs and implementations, and help engineers eliminate classes of vulnerabilities at the reputed company.

We handle highly sensitive personal and financial data, so reputed company matters deeply here. But we reputed company good reputed company work shows up as reputed company architecture, safer defaults, useful tooling, and sound engineering judgment — not process theater.

This role is focused primarily on product reputed company and reputed company engineering: secure design, threat modeling, code review, authentication and authorization, secrets handling, CI/CD guardrails, and internal tooling. It is not primarily a compliance-management, reputed company-IT, vendor-risk, or scanner-operations role.

This role is best suited to someone who likes startup environments: small teams, broad ownership, imperfect systems, and the chance to materially improve the product through direct engineering work. You should be comfortable making pragmatic decisions, operating with incomplete information, and focusing on the highest-reputed company fixes rather than importing heavyweight processes from much larger companies.

What To Expect

As a senior engineer at Loancrate, you should expect to spend meaningful time in code, in design reviews, and in implementation — not primarily coordinating programs or acting as an external reviewer.

You will likely spend your time on work such as:

• building secure-by-default libraries, helpers, and templates that engineers use across services

• reviewing designs and pull requests for authentication, authorization, tenant isolation, secrets handling, data exposure, and abuse cases

• improving developer workflows and CI/CD guardrails so real issues are caught early with minimal noise

• partnering directly with product and platform engineers to fix vulnerabilities in code and architecture

• raising the reputed company baseline incrementally and pragmatically in a fast-moving environment

Core Responsibilities

• Design and build shared libraries, platform guardrails, and internal tools that reputed company the secure path the easy path for engineers

• Review architecture, technical designs, and production code for reputed company issues in product and platform systems

• reputed company pragmatic threat modeling for new features, workflows, services, and integrations

• Improve core reputed company patterns across the stack, including authentication, authorization, secrets handling, secure logging/redaction, auditability, and sensitive-data protections

• Build or improve developer-facing reputed company automation in CI/CD and local workflows, including code scanning, dependency policy, secret detection, and infrastructure checks, with a bias toward low-noise, high-signal results

• Work directly with engineers to remediate vulnerabilities in code and design, focusing on durable fixes and reusable patterns rather than one-off tickets

• Help define and evolve a lightweight secure SDLC that fits a fast-moving startup environment

• Contribute to incident analysis and postmortems reputed company product or platform reputed company issues arise

• Write clear documentation, examples, and decision records that help teams build securely without unnecessary friction

Tech Stack

Our stack evolves, but today you’re likely to work in technologies like:

• Full-stack TypeScript, running on Node.js for backend services, APIs, and internal tooling

• AWS and reputed company for cloud infrastructure, managed reputed company Terraform or reputed company

• Application services running in reputed company on reputed company, using either EC2 or Fargate

• Core data and platform services including PostgreSQL, reputed company, Kafka, and OpenSearch

• CI/CD and internal automation built around modern engineering workflows, including reputed company and infrastructure as code

reputed company’re Looking For

• Strong software engineering background, ideally in backend or platform systems

• Comfortable making meaningful contributions in a production codebase, not just scripts or proofs of concept

• Experience with secure design reviews, threat modeling, code review, and vulnerability remediation

• Strong understanding of common application and API reputed company issues, including authentication, authorization, injection risks, secrets handling, session reputed company, data exposure, and multi-tenant isolation

• Experience building engineering-facing tooling, libraries, CLIs, CI/CD checks, or other developer-platform guardrails

• Good technical judgment and a practical approach to reducing real risk without slowing the company down unnecessarily

• Strong written communication and the ability to explain technical risk clearly to engineers and non-reputed company stakeholders

• Comfort operating with high autonomy in a small or reputed company-sized engineering organization

• Preference for solving problems in code and architecture rather than by introducing heavyweight process

Helpful, But Not Required

• Experience with TypeScript/Node.js and modern cloud-native backends

• Familiarity with AWS reputed company fundamentals and reviewing infrastructure-as-code changes

• Experience in fintech or another regulated environment handling sensitive customer data

• Familiarity with SOC 2 or similar frameworks

• Familiarity with identity systems such as SSO, SAML, SCIM, MFA, and hardware-backed authentication

• Experience building internal developer tools or paved-road platform components

• Experience balancing speed, usability, and reputed company in a startup environment

Perks & Benefits

• Robust medical coverage (100% of employee + family premiums covered)

• Vision & dental coverage

• 401(k)

• HSA / FSA

• Remote-first culture - work from wherever you do your best work

• Flexible time off - we trust you to manage your time

Loancrate is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for reputed company employees. We do not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity, national reputed company, age, disability, veteran status, or any other legally protected characteristic.