About Us:

Monarch is a powerful, all-in-one personal finance platform designed to help make the complexity of finances feel simple again. Since launching in 2021, we’ve become the top-recommended personal finance app by users and experts. Our goal? To take the stress out of finances so our members can focus on what truly matters.

We are a team of do-ers led by experienced entrepreneurs who are passionate about helping our members reach their financial goals. We are hyper focused on building a product people love and continuing to evolve based on user feedback.

As a fully remote company (even before COVID!), we welcome applicants from almost anywhere. Our team collaborates synchronously mostly from 9 AM – 2 PM PT and embraces asynchronous work to stay connected across time zones.

Join us on our mission to transform lives by simplifying money, together.

The Role:

Monarch is seeking a Senior Engineering Manager to lead and grow our Application & Product Security squad. Reporting directly to the Head of Foundations, you will own the direction of product, application, and AI security at a company where security is a competitive differentiator and a genuine reflection of how much we care about our members. This is a player-coach role where people leadership comes first — you'll set strategy, build structure, and develop a high-performing team — but you're expected to stay hands-on. You'll do the work alongside your team, not just direct it.

What You'll Do:

• Lead and grow the Application & Product Security squad, defining the team's charter, KPIs, and roadmap and holding the team accountable to measurable outcomes
• Combining strong engineering execution with strategic leadership to drive the squad forward
• Own the strategic direction of product, application, and AI security — translating business and regulatory risk into a clear, prioritized program
• Drive vulnerability management end-to-end with urgency, owning reporting across Monarch's product surface area
• Lead offensive security programs including penetration testing, bug bounty, and threat detection & incident response
• Embed AI-first, automated approaches to securing the engineering pipeline and SDLC — replacing manual processes with AI agents where appropriate

What You'll Bring:

• 8+ years in security engineering with at least 3 years leading security teams
• Hands on experience building scalable Product Security programs
• Deep expertise in application security, secure SDLC, and vulnerability management
• Experience owning offensive security programs (pentesting, bug bounty, or IR)
• Demonstrated ability to build structure, define KPIs, and drive teams toward measurable outcomes
• Transformative AI fluency — you actively use and drive AI-first approaches in your work

Nice to Haves:

• Experience in fintech or with financial data security requirements
• Hands-on perpetration testing and offensive security experience
• Familiarity with SOC 2, NIST CSF, or similar compliance frameworks
• Hands-on experience with CSPM, SAST/DAST tooling, or AI security tooling
• Prior experience at a company scaling or similar growth stage

Interview Process

• Recruiter Video Call
• Hiring Manager Video Call
• Technical Assessment
• Virtual “onsite” round consisting of 2-3 rounds
• Reference Checks
• Offer!

Benefits :

• Work wherever you want! As a fully remote company with no central office, we want you to work wherever you are happiest and most productive. Whether that’s out of your home, a co-working space, or elsewhere.
• Competitiv