DriveWealth is a global B2B financial technology platform founded in 2012, providing Brokerage-as-a-Service infrastructure that powers investing and trading for over 100 partners - including banks, broker-dealers, digital wallets, and consumer brands - across the US, Latin America, EMEA, and APAC. The API-based platform handles the full financial stack: onboarding, account funding, trading execution, and regulatory compliance and reporting, offering access to US equities, ETFs, mutual funds, fixed income, and options. The company holds patents on its fractional share trading technology, which allows investors to start with dollar amounts rather than share quantities.
For a security team, the threat model is substantial. The platform processes real financial transactions across multiple jurisdictions, handling sensitive account data, trade execution, and compliance reporting for a partner ecosystem that spans consumer-facing fintechs to established financial institutions. The attack surface includes API endpoints serving global partners, account funding flows, trading execution pipelines, and the regulatory reporting infrastructure - each carrying direct financial and legal exposure if compromised.
Security work here means defending financial infrastructure at scale: securing API-based services, protecting transaction integrity, hardening cloud infrastructure, managing compliance obligations across multiple regulatory regimes, and monitoring for threats targeting the brokerage stack. The company operates at the intersection of fintech agility and Wall Street-level regulatory requirements, which means security isn't bolted on - it's load-bearing from the first API call to the final settlement.
